ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1601.728838][T20576] loop5: p1 p2 p3 p4 < > 17:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0xe17) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0x1) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={r1, 0x0, 0x0, 0x8, 0x9}) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1602.029594][T20576] loop5: p1 p2 p3 p4 < > 17:25:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e720000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="bab863dc064b4340d953b793ca952310274023186a5e2cd3e317fffb209b23bd7e99de5b7a97ffee78418e823ab08867625613b7dc0abec60303473293431ed1ad5961e1a9593de3cd56d45d9b41566d3919230819cf3ee5b792f5ea6ec36aa9c7faeb1b2f1cf4"], 0x1}}, 0x0) 17:25:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) r2 = gettid() r3 = getuid() r4 = getgid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000001300), &(0x7f0000001340)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001400)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0, 0x0}, &(0x7f00000015c0)=0xc) r11 = getpgid(0xffffffffffffffff) stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001840)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x1000}], 0x1, &(0x7f0000001740)=[@rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xc8, 0x4000800}, 0x20000001) io_setup(0xd9, &(0x7f0000000280)=0x0) io_setup(0x4, &(0x7f00000002c0)) io_destroy(r14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1602.319265][T20701] loop5: p1 p2 p3 p4 < > 17:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1602.492628][T20701] loop5: p1 p2 p3 p4 < > 17:25:14 executing program 2: getsockopt$bt_BT_VOICE(0xffffffffffffff9c, 0x112, 0xb, &(0x7f0000000200)=0x6, &(0x7f0000000540)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0xfffffffffffffeff, &(0x7f0000000580)) io_setup(0x5, &(0x7f0000000240)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff800}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000002c0)={0x7fffffff, 0x0, 0x5, 0xff, 0xffffffff, 0x1}) io_setup(0xd9, &(0x7f0000000280)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000000)=""/1, &(0x7f0000000040)=""/17, &(0x7f00000000c0)=""/106, 0xf000}) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x4, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) r2 = shmget(0x3, 0x3000, 0x30, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000640)=""/4096) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) rt_sigqueueinfo(r3, 0x31, &(0x7f0000000300)={0x2f, 0x4}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000440)=[0xee01]) fchownat(r0, &(0x7f0000000380)='./file0\x00', r4, r5, 0x1d00) io_setup(0x5, &(0x7f0000000240)) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000500)=0x107000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000580)={0x6, 0x0, [], {0x0, @bt={0x7fff, 0x100, 0x0, 0x1, 0x5, 0x7, 0x4, 0xffff, 0xca, 0x4, 0xff, 0x3, 0xfffffffffffff801, 0x6, 0x11, 0x4}}}) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) setpriority(0x1, r3, 0x8) io_destroy(0x0) r6 = pkey_alloc(0x0, 0x3) pkey_free(r6) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000000)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000540)=0xdb, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000001640)={{0xb904, 0x3ab3}, 'port1\x00', 0xc, 0x0, 0x2, 0xed93, 0x8000, 0x7, 0x6, 0x0, 0x1, 0x80000000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:25:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e730000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x422482, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000000c0)="7dda774f2866ebbd54ae7097ef40a3ba6ad3cf6bd203d89e5c6f02f90a6b84a9ae66a474baa8ad8e7acc9f2514e3cfa57dd8c2cf6474cb0a33465c242e852876e865c467124f952adbad31b0e62158d21b988683ea7a50510b80f201cedfec5105f8add37966febdc4f55de74ba25ff06e5a282ff82a119fe89022417221cc2972e3d546b10c5c3afdcbe2534522", 0x8e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x5}, @in6={0xa, 0x4e20, 0x3, @remote, 0xf66f}, @in={0x2, 0x4e20, @empty}], 0x58) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:25:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008914, &(0x7f0000000200)="0adc4b753c128aae1c1a1a11a390a59bd0709bbb32c4a6106b5af242aa7cd731c2fcd53aa465614e3cab3a3a0991e8c03654eb11cf8a5a450943f70439313d209e9d0f4763b768a529118f750d18fc034d64150064f871cae99565ab2a80bd128e1634a39ba39e78c6db791b4430b493b48630885304da51878919d629b4a0e80ea8af8255af0e63664e371b90ada3bce843ba0eac4b8fa4dd79975e136a04335fee8918580f3c4cc78e9bef6738fd528f17a49235292ee45ec39e66761c65ebaf8a1048443edbbe9dcdf303afc98b849444c7eb43aaa69ff51f3c3a5a604b4bce8a18607aeb6e0fcbe7aee5e4a42a19e34315f6") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='netdevsim0\x00', 0xfffffffffffffecf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="00082cbd7000ffdbdf250800000008000500010100002c000300080005007f00000108000500ac1414bb080007004e2200000800040001040000080008000100000008000600480100003800030008000500ffffffff14000600fe8000000000000000000000000000bb08000500e00000010800040000000000080007004e240000080006003f000000"], 0x90}}, 0x20000000) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00<:\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000003c0)=0xfffffffffffffffd) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r3) 17:25:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1603.248505][T20844] loop5: p1 p2 p3 p4 < > 17:25:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:25:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200100, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000001200)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000200)=""/4096) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001280)=ANY=[@ANYBLOB="3ed248056417f089635c623fbefa811a6e5048e3cd589d04c6025ebd0baa76e6b5e23d062012aab72a04434b5ca88f49df98a41571dd07358689085ca46e77373aeb1e2471612e9563e7d20e7de6772958c2769d5c880419e93c1b2855dababd6917c023142d6369df0fdcc7dabcec35212fd0c9a2bdb75f02aa94d7277eeeb5425f2bcdb691fe8bfa8c9c52d930841564f2f4767a0b6c69cba066dd91727b3ea80f4f758fc768e8148c77aed47ba941521971e72820f1c1ffda7b125c07294c1768992c51701ed23b39f9121db0e151f9acd9e3d17e0acce949cd170821d452a27a913af525c2998223"], 0x1}}, 0x0) 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:25:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x26}, 0x2) r5 = gettid() perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xfffffffffffffffb, 0x74, 0x3ff, 0x2e7, 0x0, 0xffffffffffffff01, 0x400, 0x4, 0x4, 0x101, 0x9, 0x6, 0x4, 0x3ff, 0x8, 0x84, 0x20, 0x617, 0x100000001, 0x8, 0x4f, 0x0, 0x5, 0x1000000000, 0x1, 0x2000000000000000, 0x8, 0x5, 0x7fffffff, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8f, 0x7f, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000340), 0xe}, 0x842, 0x8, 0x2, 0xf, 0x6, 0x6, 0x1ff}, r5, 0x7, r1, 0x8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@rand_addr="2e8012da081ca90900452a47260609dd", @in=@empty, 0x4e22, 0x0, 0x4e23, 0x6, 0xa, 0x20, 0x20, 0x3b, r7, r8}, {0x80000001, 0x8, 0x0, 0x5, 0x81, 0x8, 0x7, 0x7}, {0x740f, 0x401, 0x6, 0x10000}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x7350f945ce424d26, 0x1}, {{@in6=@ipv4={[], [], @broadcast}, 0x4d5, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x2, 0x80000000, 0x7, 0x5, 0x4}}, 0xe8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000c9ac9b239f48836872", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2e0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000240)={r9, 0x0, 0x5}, 0x8) r10 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x8, 0x80000001) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000003c0)=0x5) 17:25:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x3, 0x0, [{0x2}, {0x100000, 0xe9, &(0x7f0000000300)=""/233}, {0x1, 0xb9, &(0x7f00000000c0)=""/185}]}) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) [ 1603.542487][T20844] loop5: p1 p2 p3 p4 < > 17:25:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000740000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:25:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000200)={0x80000000}) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e20, 0x2, @remote, 0x9}}, 0x5, 0x4, 0xfff, 0x7fffffff, 0x7fff}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000700)={r4, 0x8e, "f21a135bb81cbf4f62afda0bc29a4c4143807542b1f81155f8b83e62a48da7f2a754f62facac30ceb15d9d12f6414fe9b7be72cee4fd15a8dba5694d2003da543b57f8ac4bfa4f1331f2acf5cec29d6fd0a311649d7d98a1a73f39a32f2300cb85fa45ace06fe7f70fb0abf015f041c66222cac490b3de1ecd85624efdf3c7ba9df5ae100d9c3ab2751537573626"}, &(0x7f00000008c0)=0x96) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) r6 = semget(0x2, 0x4, 0x2ac) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000440)=""/218) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r7, r8) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:15 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000000000000cc6994f800"/32], 0x20}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) io_setup(0xd9, &(0x7f0000000280)) read(r2, &(0x7f00000009c0)=""/191, 0xbf) syz_open_dev$vivid(&(0x7f0000000b00)='/dev/video#\x00', 0x1, 0x2) io_setup(0x4, &(0x7f00000002c0)=0x0) io_setup(0x5, &(0x7f0000000500)=0x0) io_destroy(r5) tee(r0, r2, 0x8, 0x400e) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80)='SEG6\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) fchmod(r0, 0x20) mount$9p_unix(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x2000, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d756e69782c76657273696f6e3d3970323030302c76657273696f6e3d3970323030302e4c2c667363616368652c667363616368652c6163636573733d2127126e0d78a2b01da7f5bea790a257684ae9196d77d4056b7f040ee3e7e45d", @ANYRESDEC=r6, @ANYBLOB=',access=user,cache=mmap,access=', @ANYRESDEC=r7, @ANYBLOB="2c737562d13e58b0b6f96a5f747970653d2e2f6367726f75702e6370752f73797a31272c736d61636b66737472616e736d7574653d2f6465762f766964656f3337002c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r8, @ANYBLOB=',dont_measure,\x00']) io_submit(r4, 0x3, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x16e, r1, &(0x7f00000000c0)="edd3a05ddb9b8c0e8a5634a497d1b6f95250acd35c7d93479be2bce1977cc361d0c073bd75ea350afea3a3bfba2b1f214b64014033d68a6318666e8a75bc013204bc4af68c906642414a59cff21b29554a89fc6e97f85d3d0a81a0f3a7d8c3f97f92c66f6770f0e3c5a261cc7014a0a2c99d14dd64597f0c1cab36b0a14299933188a399ae048ea13ced272b2097e5bb741b06cbae9f308fd20ea9df659dfac1d4af425c902420bcac", 0xa9, 0x8, 0x0, 0x2, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000300)="af324ac0ed8c8e75ac51b6c70707b95df19b77ce8c23a0049b4a7bd4582d648db3696cb98f434e94333541962d79f66c8e42864a0a2a8b9cfe89dee5012496aa33ef028cfebcb37f95ec2e9d1633c4", 0x4f, 0x5, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1f, r1, &(0x7f0000000380)="ea0c9d5121c753521356aa6cc2dcb638d0ab06da620275d670847f2786dcb222ef6a473813d0bc17f8f406fef8fbc861be3dfb6c29483dc7fc18d65dec6f68f88ad779c0850ea150927d5636f875e5369a614fd4d05e272b29b2702285e53680516c276b8d5e00e384126c3a44abe3752ffaa6c9422eba9fcc20d8bfc6ea469218a342307cf7a9f3afc7d804ba8cb44a02bf9b4b436a96937c64b4", 0x9b, 0x40, 0x0, 0x2, r2}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1603.808119][T20981] loop5: p1 p2 p3 p4 < > 17:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x8000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "5318e467697ee83c6562f7b21c85a5dbc0f647f41eeee14a1082f20caae6f69a38bc3714b7cc6d74841468c5c51c8f8fb9c7229b256240f17f79f6c0035f44085ee4b74bed593b632373ecc424c252eeda027968"}, 0x58) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x6, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x2, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000b7", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1603.998618][T20981] loop5: p1 p2 p3 p4 < > 17:25:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt(r0, 0x4, 0xa9, &(0x7f0000000200)="ca6d476430c59b6cdb9b33e6bd85c83e791ea88285036cf6ac4b29bac66234bb055bc3fa390a6e76bfb88ffdb515453df4f50919622700f33cd8212ca7d46a4af0537f1cd2b725e75f1eb6ebad5f046f9100827717856a31b49c3eeb2a8bbb29f2d9f9c463ea4bad9a1e88126960caaeb98de333a6f0164d8cc2ede663cab644de4e9306b4e48da29e1ed27c0814e2d803596a92e0f61bf4dce9aa1b6331180b9b12fe3f1b4bfc2ddc77bb597b1b9e618f54cb47736bbf4b183af5fdca17f533c54e23a48db30f958515356979006ad0cfee224cf29d6a671dac87d1918ab7932cb9520f788a9650e0040081dc9dcc5b6743ff61c153", 0xf6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e740000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:16 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x800) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000300)=""/176, &(0x7f00000003c0)=0xb0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) bind$isdn_base(r1, &(0x7f00000002c0)={0x22, 0xed, 0xac7, 0x2789, 0x5}, 0x6) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd8, &(0x7f0000000280)) io_setup(0x4, &(0x7f0000000000)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14}, 0xfffffe08}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x7fd) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) dup(r3) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:16 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80008100256388ca", 0x12}], 0x1}, 0x0) [ 1604.783673][T21108] loop5: p1 p2 p3 p4 < > 17:25:16 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1604.852494][T21118] batman_adv: batadv0: adding TT local entry ba:00:00:9b:80:00 to non-existent VLAN 1379 17:25:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x80082407, 0x0) 17:25:16 executing program 3: ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1605.018808][T21108] loop5: p1 p2 p3 p4 < > 17:25:16 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video37\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000000008400000000000000cc6994f800"/32], 0x20}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) io_setup(0xd9, &(0x7f0000000280)) read(r2, &(0x7f00000009c0)=""/191, 0xbf) syz_open_dev$vivid(&(0x7f0000000b00)='/dev/video#\x00', 0x1, 0x2) io_setup(0x4, &(0x7f00000002c0)=0x0) io_setup(0x5, &(0x7f0000000500)=0x0) io_destroy(r5) tee(r0, r2, 0x8, 0x400e) syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80)='SEG6\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) fchmod(r0, 0x20) mount$9p_unix(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x2000, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d756e69782c76657273696f6e3d3970323030302c76657273696f6e3d3970323030302e4c2c667363616368652c667363616368652c6163636573733d2127126e0d78a2b01da7f5bea790a257684ae9196d77d4056b7f040ee3e7e45d", @ANYRESDEC=r6, @ANYBLOB=',access=user,cache=mmap,access=', @ANYRESDEC=r7, @ANYBLOB="2c737562d13e58b0b6f96a5f747970653d2e2f6367726f75702e6370752f73797a31272c736d61636b66737472616e736d7574653d2f6465762f766964656f3337002c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r8, @ANYBLOB=',dont_measure,\x00']) io_submit(r4, 0x3, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x16e, r1, &(0x7f00000000c0)="edd3a05ddb9b8c0e8a5634a497d1b6f95250acd35c7d93479be2bce1977cc361d0c073bd75ea350afea3a3bfba2b1f214b64014033d68a6318666e8a75bc013204bc4af68c906642414a59cff21b29554a89fc6e97f85d3d0a81a0f3a7d8c3f97f92c66f6770f0e3c5a261cc7014a0a2c99d14dd64597f0c1cab36b0a14299933188a399ae048ea13ced272b2097e5bb741b06cbae9f308fd20ea9df659dfac1d4af425c902420bcac", 0xa9, 0x8, 0x0, 0x2, r2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000300)="af324ac0ed8c8e75ac51b6c70707b95df19b77ce8c23a0049b4a7bd4582d648db3696cb98f434e94333541962d79f66c8e42864a0a2a8b9cfe89dee5012496aa33ef028cfebcb37f95ec2e9d1633c4", 0x4f, 0x5, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x1f, r1, &(0x7f0000000380)="ea0c9d5121c753521356aa6cc2dcb638d0ab06da620275d670847f2786dcb222ef6a473813d0bc17f8f406fef8fbc861be3dfb6c29483dc7fc18d65dec6f68f88ad779c0850ea150927d5636f875e5369a614fd4d05e272b29b2702285e53680516c276b8d5e00e384126c3a44abe3752ffaa6c9422eba9fcc20d8bfc6ea469218a342307cf7a9f3afc7d804ba8cb44a02bf9b4b436a96937c64b4", 0x9b, 0x40, 0x0, 0x2, r2}]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e750000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1605.330873][T21136] loop5: p1 p2 p3 p4 < > 17:25:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008916, &(0x7f0000000340)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="000030003d00c7e30c18e93a1fdbcb95ec8d8803d59a8042e5c9a12d324160a16e7a53f2"], 0x38) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000200)=""/170) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000180)={'ipddp0\x00', 0x94a}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="83f84cfbffff0100000000000000b7771513220686f1e0f9ee8c0c3ae6358def69fb35dd0000d2703eeb"], 0x1}}, 0x0) 17:25:17 executing program 3: ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000040)={0x3}, 0x8) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) r4 = fcntl$getown(r2, 0x9) syz_open_procfs(r4, &(0x7f0000000080)='projid_map\x00') connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000004a2bd0a9040000000323acf2aa1bd08fd2a5281d0502ea80e9aa4b100c043605163b330ff9c0b5acb5f6570dcebb183aab7dcfa831600594bf9c2b18c64c8eae35f2d39afbc1c83ec98f1885c92377ade730b641fe1b482f960d31c3e1094d0000000000000000003a33af780a4714881f76ff057cec7bb48bb68a124b08ef4b722453e4fd8f9ec4d29f38db6620d14945a9540d6333f38903b5083bb0bb5d4cf8861137feeb947917ded33ad6c5da9c65149b8ebf5702084397dea8f19a9f7d5221c58be39394eabacc7c80e89669e46725b4442ed98a9853142ffbca97b564bcc39392"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 17:25:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14}, 0xfffffe08}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x7fd) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) dup(r3) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1605.510122][T21136] loop5: p1 p2 p3 p4 < > 17:25:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e760000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x6, 0xffffffffffffffff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:17 executing program 3: ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0xa00000, 0x101, 0xdd1, [], &(0x7f0000000040)={0x9b0940, 0x8, [], @ptr=0x9}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300)=0x1, 0x4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000200)={0x3, 0xfd, 0x1000, 'queue1\x00', 0x6}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x60, "3e4620448f91eca482866c2fc76c511152695e9e53de60e1754db8348d7a7ef8af4d667ef58322f6f42c6b00fa1c5908f1ede49d3f717f3dbc716a6622b7e92f0bd026cb4a1c55834a7ea13d7c72e65b3d8764cd69b066cfba2070c15e2a8f07"}, &(0x7f0000000180)=0x68) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000002c0)=0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000040)={0xbe0000, 0x1079, 0x9, [], &(0x7f0000000000)={0xa00902, 0x6, [], @value=0xe8e3}}) io_setup(0xd9, &(0x7f0000000280)) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r1, r2) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)=0x1) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:17 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) io_setup(0x1, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1606.588544][T21391] loop5: p1 p2 p3 p4 < > [ 1606.748671][T21391] loop5: p1 p2 p3 p4 < > 17:25:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e770000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000400000071286dda5adeb76b75d9bd5c28fdb2d6cb6967722ef09f0f82f76d10fd5a046ddf811462a38bc7f84fe0ac8aa79b1fccf7a3aa5ee99188c9f3a87e53f306323e3f8d9b63a33d8cbab3cb63bd2f7efc48a040f269578bc3184e832681031da1cf2628df8ff81eea0054f33d59f04a646fda0772a7f9d804000000000000002455c6a7a4ea235a863acdc71a51d60deb29e22368550129"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1607.021836][T21476] loop5: p1 p2 p3 p4 < > 17:25:18 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0xb379, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffbff, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3308001}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x88, r1, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x63}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x31e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb5c}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)=0x0) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0xb, &(0x7f00000002c0)) io_destroy(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x3f87dcdc}, &(0x7f0000000340)=0x8) io_destroy(0x0) socket(0x14, 0x0, 0x4) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/75) 17:25:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1607.708480][T21476] loop5: p1 p2 p3 p4 < > 17:25:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e780000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x200, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x1) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000040)={0x1, 0xc1c9}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20004500}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xcc, r1, 0x502, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x55d6}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5851}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x10) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) syz_read_part_table(0x6, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)="6d79e1f40a33ca2383061ea8971b", 0xe, 0x2}, {&(0x7f0000000300)="1c63009773eec07ec463665852ac1e3a76b5a9f274580e9706124de42f9215e808741cbce3c0d0a78f1757ca98a2734edfdcb79bd9f66d2b4f4686085e0b27f662ca25c72b51bf5582233366b3df4764f2c3d7f792fbea632679c9233acba573c78484c5f4d6bb70f6ae84ab35fd1a733ba223c32c3e757875d8082931b86511b473c37b21d4453a2c2ec0ea74132b285eaed334402ac51adf134e5a913b5b4951e69227fabc42aed5b2de3f35205743c36fcf6e3247b98d6871f61f3d28d14f883b93d823939b90a91f21d6eafe424cd05a916fd90c68bee0397d8354ef48336329facc06652a2c", 0xe8, 0x5}, {&(0x7f00000000c0)="2efddcf5501a38c69ec47a9c913d897eb59ba7b38da4ea139dc1ecab54ae54d5a0db594b34a95863913381f981dba2f7cfb0b1051f2bf65e530981cc220437541c94c2aaa4ea3c8e2c692ac09b53b8990258a4d53f4f245e4e64b2ec619828c586b2", 0x62, 0x6}, {&(0x7f0000000140)="2f966bb52f6e1d988f7445bdf2051ea538803504bcb0af0c40da30166505", 0x1e, 0x3}, {&(0x7f0000000400)="24229294786b4f7c75b18ef83d63632a234f8d260cf24afd5a183630eb7890b6dc97ddba412dc49a1b6b9839ca9f59e72004316e1a6c524159530450ed6a861836d9e2219ab65b0a2a81dea3d93bdfbbd16df058bcff975bce724f8c3b2bdd66173104ab5a7f67d870b18ad2dee1a81b56371e3b564628e58421c5c111d4ff697ef29ce644e2d00f9f3817989f3c46", 0x8f, 0x7fffffff}]) 17:25:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1607.948665][T21541] loop5: p1 p2 p3 p4 < > 17:25:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) 17:25:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, r2, 0x310, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4000000000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000003c0)=0x7fff, 0x4) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) 17:25:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c12") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 17:25:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e790000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c12") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000040)={0x0, 0xffffff64, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 17:25:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c12") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x7ff, &(0x7f0000000100)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x6400000000000, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) 17:25:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1608.866727][T21767] loop5: p1 p2 p3 p4 < > 17:25:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x100000000, 0x85b2, 0x9, 0x92, 0xb, 0xfffffffffffffffa, 0x0, 0xffffffffffffff66, 0x77, 0x1, 0xffffffffffffff7f, 0x6}) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x20, 0x20, 0x7}, 0x6) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1609.069440][T21767] loop5: p1 p2 p3 p4 < > 17:25:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000007a0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x100000000, 0x85b2, 0x9, 0x92, 0xb, 0xfffffffffffffffa, 0x0, 0xffffffffffffff66, 0x77, 0x1, 0xffffffffffffff7f, 0x6}) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="13dbf672bfcbc5179ce8f32c696a017f1ddc3b84432d745db06161f49f339b52f1451e90c907a0fe770462c106a5a24a40f8924c4db29f781ba7cd847f9a96c8cffe2f8e2d7d5ac464228232be8084b2d68d76259468cbe9811679b099fead7201a24fdb1fad2d82b5232ed699a686e951693657b6b0d141e8", 0x79, 0x4000000, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1f, 0x3, 0x7, 0xa522, 0x10}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0xbf4f}, &(0x7f0000000180)=0x8) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="abb43ef43f64ccf5c763ce9aabd2f3a97d301069acaace04240660a25dc24d7cb8f71516cc661dc42cf301b422bf90"], 0x1}}, 0x0) 17:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x1027a, 0x600007fd, &(0x7f0000000200)={0x2, 0x8000000004e24, @rand_addr=0x20}, 0x87daaa645fdd9c6c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x1d, 0x100000001, 0x200000, 0x663, 0x6, 0x4dc, 0x2}}, 0x50) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}}, 0x8) 17:25:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x3, @loopback, 0x7}, {0xa, 0x4e22, 0x9, @mcast1, 0x100000001}, r3, 0x20}}, 0x48) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x5, 0x3, 0x6, 0x5, 0x3, 0x7}}, 0x8) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000440)={0x200, 0x0, [], {0x0, @bt={0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x8, 0x9, 0x400, 0x8000, 0x3, 0x1, 0x0, 0x9, 0x879b, 0x5, 0x8}}}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x208000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000100)='./file0\x00', 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000180)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) memfd_create(&(0x7f0000000040)='.systemproc@keyring}em0vmnet0,}trusted#vmnet0\xd1\x00', 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1610.140421][T22026] loop5: p1 p2 p3 p4 < > [ 1610.699886][T22026] loop5: p1 p2 p3 p4 < > 17:25:22 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7a0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000100)='^\x00', &(0x7f0000000140)) 17:25:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0xfffffffffffffffc) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1610.980344][T22150] loop5: p1 p2 p3 p4 < > 17:25:22 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:22 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006572c1944142924db6b82ddc01a309384f2138583b3a2fb936b2f8f78212918c393d49287c2b51ac7d79f40b0d4639a41cbdda1ecad8", @ANYRES16=r1, @ANYBLOB="000125bd7000fcdbdf25040000000800060008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x8010) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="01") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x2000) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000200)=""/171) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r5 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000040)={0x800, 0xffffffff00000001}) 17:25:22 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:22 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1611.196418][T22149] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? 17:25:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) [ 1611.378851][T22150] loop5: p1 p2 p3 p4 < > 17:25:23 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7b0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:25:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000849e2b00000000000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:23 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:23 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x3}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x1000, @loopback, 0x401}, @in6={0xa, 0x4e22, 0x4e, @rand_addr="34393fc537bdb4b531bdbe41810d3b43", 0x1000}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @rand_addr=0x100000000}, @in6={0xa, 0x4e22, 0x8, @empty, 0xc500000000000000}, @in6={0xa, 0x4e24, 0x981e, @local, 0x2}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}], 0xcc) sendto$inet(r1, 0x0, 0xfffffffffffffd47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:23 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:23 executing program 2: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000550000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:23 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x2000000001ff, &(0x7f0000000300)) io_setup(0x5, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x89, 0x8000, 0x7fff, 0x100000001, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x4}, &(0x7f0000000140)=0x8) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) 17:25:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x3ff, 0x100000000, 0x0, 0xf}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="f1411da8c78de76f3554132c70746b334838210ec5"], 0x1}}, 0x0) 17:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1612.068332][T22503] loop5: p1 p2 p3 p4 < > [ 1612.158667][T22503] loop5: p1 p2 p3 p4 < > 17:25:23 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000027c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x101400) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$netrom(r0, &(0x7f0000000300)={{0x3, @default}, [@null, @null, @default, @null, @bcast, @bcast, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x800) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000f2c36981b75214fac3d276fb793f3da3f5991f2acac5a2753067b4d1684cec1b36b3393e4c28211d48aeced45d535c50c2de2e08", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 17:25:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) io_destroy(0x0) 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x14008, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, {0x307, @local}, 0x8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 'vlan0\x00'}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000300)={0x2, 0x5, 0x4, 0x84000000, {}, {0x0, 0x0, 0xb63, 0x78e972a3, 0x4, 0x800, "8b7840af"}, 0x4, 0x2, @userptr=0x3, 0x4}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x8, &(0x7f00000002c0)) socket$inet_udp(0x2, 0x2, 0x0) io_destroy(0x0) 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:24 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x200000000001ff, &(0x7f0000000100)) io_setup(0x5, &(0x7f0000000240)) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={{0xfffffffffffffe00, 0x7, 0x80000000, 0x7000000000000000, 0x7, 0x800}, 0x8}) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1612.694348][T22520] loop5: p1 p2 p3 p4 < > 17:25:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000004d06000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) flistxattr(r1, &(0x7f0000000040)=""/115, 0x73) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x3, &(0x7f0000000000)="0adc070000000000000070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='{\\ca\x1c\x88\x00\x01\x96\xe3\x00\x05\x00', 0x3bc329e379275758) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x5a, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x1, 0xfffffffffffffffa, 0x9}) [ 1612.869186][T22520] loop5: p1 p2 p3 p4 < > 17:25:24 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="100829bd7000fedbdf250f00000008000400c205000008000400060000000800060020000000080006000900000008000500020000000800050008000000226f976eef"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00\x00\xcc\x94\bg\xfa\xe6\x84\xba', 0x10) r3 = dup2(r1, r1) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000240)={0x0, 0x6, 0x8f, &(0x7f0000000200)=0x100}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:24 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r2 = getpgid(0x0) fcntl$lock(r1, 0x0, &(0x7f0000000400)={0x2, 0x7, 0x165, 0x6, r2}) flistxattr(r0, &(0x7f00000004c0)=""/4096, 0x1000) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0xcb0, &(0x7f0000000100)) io_setup(0x5, &(0x7f0000000240)) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000480)={0xea78, 0x4}) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000440)=0x5, 0x4) io_setup(0xd9, &(0x7f0000000280)) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000140)) io_setup(0x4, &(0x7f00000002c0)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) get_robust_list(0x0, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000200)}}, &(0x7f00000003c0)=0x18) io_destroy(0x0) 17:25:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1613.178577][T22648] loop5: p1 p2 p3 p4 < > 17:25:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1613.289530][T22648] loop5: p1 p2 p3 p4 < > 17:25:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x43e, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1613.314293][T22648] loop5: p3 could not be added: 12 17:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:25 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7d0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000fb15cf4e6b46ebc8360af0b820ce0835d2137288ac3d13a9b59ce549f36ece4f197cf0caecc9dc8929c0243ac90109b93be95c02f9ef0fb404df747bbff8f407b39a1244895a39af1e867520dd92aa3b1d9e66c269a50ea08d0a5856d7bfeced4ef48d09cdc8c6348eebadf8abb72dde3c0ee2cd00b05dd0437313539c10", @ANYRES16=0x0, @ANYBLOB="0000385ebbdd9dc9b2540e78ff153e6a687fad82dff4212584181a3fa2fffaad4191ee50a53952949c94f45f58243b55b69b65c016303ca6de2a825567ff6fa701f3d4c72d9a65e5060c5a3536a2bd6ac3ec8961365d9ce90a0a4ac6c20172"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 17:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x4, "a55f4163"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x4, &(0x7f00000002c0)) io_destroy(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) 17:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty}, &(0x7f0000000100)=0xc) connect$packet(r2, &(0x7f0000000180)={0x11, 0x16, r3, 0x1, 0xf872, 0x6, @dev={[], 0x25}}, 0x14) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x4, "a55f4163"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1614.064521][T22784] loop5: p1 p2 p3 p4 < > 17:25:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x4, "a55f4163"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1f, 0x4) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x0, 0x1, 0x9]}, 0xa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x8, 0x6, 0xfffffffffffffff7, 0xefc9, 0xffffffffffff0db6, 0x1, 0x80000001, 0x100000000]}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) [ 1614.319266][T22784] loop5: p1 p2 p3 p4 < > 17:25:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x3, &(0x7f00000002c0)) io_destroy(0x0) 17:25:26 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7e0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x6, "a55f4163142b"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x6, "a55f4163142b"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) io_setup(0x1ff, &(0x7f0000000200)) io_setup(0x5, &(0x7f0000000240)) io_setup(0xd9, &(0x7f0000000280)) io_setup(0x2, &(0x7f00000002c0)) io_destroy(0x0) 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x6, "a55f4163142b"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 2 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1614.870197][T22817] loop5: p1 p2 p3 p4 < > 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x7, "a55f4163142bb9"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x7, "a55f4163142bb9"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1615.131672][T22817] loop5: p1 p2 p3 p4 < > 17:25:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8001, 0x0) accept4$packet(r2, &(0x7f0000000100), &(0x7f0000000180)=0x14, 0x80800) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a2ebe05690ae5edc848f00000000000000076b16517b21b6c8d484efc0e7bb4f73c82fef979ba018c31968f3210231e54ee9084c47d569c46170832c5eb4e7f333d9a07040a3af34b8ef000000b1307b9a0000000000000000"], 0x1}}, 0x0) 17:25:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x7, "a55f4163142bb9"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:26 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e7f0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1615.419444][T22949] loop5: p1 p2 p3 p4 < > 17:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'veth0_to_team\x00'}}, 0x1e) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r3, 0x401, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000f9ffffffffff03000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x20000, 0x4) [ 1615.551105][T22949] loop5: p1 p2 p3 p4 < > 17:25:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:27 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e800000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1616.080187][T22977] loop5: p1 p2 p3 p4 < > 17:25:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x0) 17:25:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000300)={'filter\x00', 0x0, 0x4, 0x34, [], 0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/52}, &(0x7f0000000080)=0x78) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) read$FUSE(r3, &(0x7f00000008c0), 0x1000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000440)={0x2, 0x3, 0xfc, 0x2, r4}) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) [ 1616.232995][T22977] loop5: p1 p2 p3 p4 < > 17:25:28 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e810000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80000004008c, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xfffffe1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0800000045727b85b4faf0c45854d1a452f093b066ab3505066dfd308511981bc158c223c3b2ee3aa885b9a2d330a9250850ca2d43b6c4f037f0031278aadd0d4dfc3a5f1263aee5fc8908086c492eef33a1087ed43ecc196614caf1187cb05b9907934a26c312de93ca73eeaa56a0142c019cfe713a0255fd6cabda40cc35a398e4f1e0c0defb1a7d71a7d4418c391f13a7519f68c65400abfd33fa8a4cc6791bd07d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000400000000"], 0x14}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) r4 = geteuid() getgroups(0x9, &(0x7f0000000040)=[0x0, 0xee00, 0xee00, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff, 0x0, 0xee01]) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0xc) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000480)={{0x1, r4, r5, r6, r7, 0x129, 0x101}, 0x6, 0x15c1656, 0x394d, 0x8, r8, r9, 0x3f}) r10 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_SET_FD(r10, 0x4c00, 0xffffffffffffffff) [ 1616.658970][T23110] loop5: p1 p2 p3 p4 < > 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1616.825324][T23110] loop5: p1 p2 p3 p4 < > 17:25:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x100000, 0x10001, 0x4000, 0x107000], 0x3f, 0x40, 0x1}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000440)="a97b83b144da4faae0a459a2a3e4108f859cd8e9c11c522a38eb0217e4d033be026b434e9d7f06e6af716e7755b6e8c41a8b0ee227184a4d7dd962c87c1ea074f97bc409f56dc6c715a02369767def44f7c99c0802903b7019af8c7f4c80892d404b4d1221c93b41a46db89bdaaefb39b30f31046cbc948290dcacb83e0321e5b2abcba2f278e1d6f8b482b04766f0c30d5ebe8cf491b4370b3fedae06bf2b86109742f5de7cade1429c6761797e44c52fe25227f0a6182a5c9f76b75d90a98e65938df3f08a36d9559b5d9286ad2314373303e971f81b242c5b3430e61a63fca5835067b833b123", 0xe8}], 0x1, 0x0, 0x0, 0x8000}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000540)=""/210) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000122f", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000796fac8760ff93a289d41213cca9ebe7df570c2907d64ffbfdf46178c3632f7710bba1c27a5a3b6d9fe3ba177694e68003a26ca0ae3ff68633c25acf71ff98cb487f4f601bca43766418f1f98145f334bff918bd240336d4d6deaa6d2283ac6107bc480ee71cb7f99caaedd88538198b2dfd4e15ddf8e72d6a550bc9f543812b6edf52eddddb7300"/159]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:28 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e820000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1617.298857][T23231] loop5: p1 p2 p3 p4 < > 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:25:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000040)={0x8, "a55f4163142bb9e4"}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:25:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xc19ceead5cb9b583) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1, 0x1, 0x7, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040804}, 0x4800) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0xffffffffffffffc3, "71e19cb66b6472ff96ac67229da80d19652d3c21dea6b80c313cf54335aa44b8", 0x0, 0x882, 0x0, 0x7ff, 0x2, 0x0, 0x80000000, 0xaac5}) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4043, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1617.949654][T23231] loop5: p1 p2 p3 p4 < > 17:25:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:29 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e830000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b355a65ce1c250f11c1e3a38fbda33ded91098af190048e402e8e91e50931856c9540e52d72fa28ff0d9c275bec3f3b67249071abab841188ff1d2403071bb6b993943ae262504f812a6ae50f970dec0225012dd1111d6188de496f56d6bf003c0154d74756904dbd5f5063e24cf8cc8e683c404670e5468f0fb363072471991b81b5d0f96cd1ce2ca038d7c2adfc4e0612e0cae"], 0x1}}, 0x0) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r2, 0x302, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffff881}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1618.228695][T23484] 9pnet: Insufficient options for proto=fd 17:25:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x204, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet(r1, &(0x7f0000000080), &(0x7f0000000200)=0x10, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000400", @ANYRES16=0x0, @ANYBLOB="0000e9fff7ffffffffff04000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000f40000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x7fffffff, @mcast2, 0x4e4}, r2}}, 0x30) [ 1618.318602][T23489] loop5: p1 p2 p3 p4 < > 17:25:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) socketpair(0x3, 0xf, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80000) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x40000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x7, r0, 0x1}) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x40) 17:25:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r0) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @loopback}}, 0x24) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x3) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1618.529286][T23489] loop5: p1 p2 p3 p4 < > 17:25:30 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e840000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:30 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, {0xbd, 0x2, 0x2c90, 0x7, 0x5}, 0x871}, 0xa) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000240)) io_setup(0x2, &(0x7f0000000280)=0x0) io_destroy(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000ffffffff0000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x9, 0x1, 0x2, 0x100, 0x7a1, 0x80000001, 0x401}) 17:25:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0xffffffffffffff81) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="707df24aca100ecfbd0ae9395c4de42d96a69efe3de6f40815529a30780b016226b9a8ae0323077c27874cc4ba3c8e0d380105970cea5aff321f86629e89547c107eaafebafc06bda97ff130319020a912ffcfdb64765f46d16534ce954be5693696c54ea21fcbaf7501c89f7dbc62c99d4bb25cba459ffc9647e3f0bac62a767dd4839997c73e29"], 0x1}}, 0x0) [ 1618.808420][T23687] loop5: p1 p2 p3 p4 < > 17:25:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xfffffffffffffffe, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="3e270a150ad7562bb7a83ca6000000"], 0x14}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x7}, 0x28, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:31 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e850000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:31 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) socket(0x8, 0x803, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x80, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0c7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xf, r0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000001", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000003c0)=0x4000) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/22, 0x16, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0xe}, 0x20}, 0x1c) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1619.491753][T23740] loop5: p1 p2 p3 p4 < > 17:25:31 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_destroy(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x800, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x4000844) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000088f3da7d9f7cce03f9206c5b2f3cdd221b010d388965145b404ee6eaf036c008bb70cedba4749d8e5829dfc58df0bbc021bca852aa77e240ad42b6fa07808c7c33f29a20b63718ccc2a606b2f27a022ecfc2550ca839a872686d454f9bfb58e0893dde0739a994b709f4ea9c6d6939bf21cd8e0f84e501cd3f0b24e58c5f93c5", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) recvfrom$netrom(r1, &(0x7f0000000200)=""/130, 0x82, 0x0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x48) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x7fffffff, 0xc000000000000, 0x10001, 0x401, 0x0, 0x6, 0xfffffffffffff484, {0x0, @in6={{0xa, 0x4e21, 0x3, @loopback, 0x9a7}}, 0x4, 0x7, 0x597a, 0x20, 0x80000000}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000003c0)={r2, 0xd4, "d9fe2d7659673c2608b3fe91be1301b188a2a598696898c617a8aad51713b12600a9521fdb45e6fd4002e37a6a87ebed36c4bffe6bf46ef6dd6260ed0a4982677c163289e3ad93b7f7566df3c0017d247f0786280ea9c95e313dbf7feb7fcc42ed0b2947c708f64c1fbd18aa62a3717a5325b8a551f6011e9cb7e01809ebf0736d407aa8ceea30c221e6b390bb609fbfcfb6bcd8941d2c5edcd944e882f62217f9dd4f0caba6c443df6fa37c1680b2dc7160a495adc7f6bcd0b0596639c9ab593eb5ba806cc7c7a598c2651063a5552149e4480e"}, &(0x7f0000000100)=0xdc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000200)={0x9, @raw_data="6bc83ce19d6c8333dda2ecb186c462e848e7e5cdf07964058e3b5d9546ec224f16476b56f8e6f113330b4e6534a14f88c55e1d29e1dbda00f891b44de9cf7ca332061a2b1209ec7b781f5208cc213e32211bf8a6367ca0de2a2e51486d158082394b0384c49b0991f493a764a984bf4dfc5693fc90f85b4c5980802e44cab6f7d33e80118a71c44affa182a67aa933de0cf425d64919ab820eae48ec58b9371e05418b0faa5802e0b5c3d703b750bffb623f1881144282befddf36693414da049327afa093179451"}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='v\x00', 0x10) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 1619.915973][T23740] loop5: p1 p2 p3 p4 < > 17:25:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a2bf16c0500002082d070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:31 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e860000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x200, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000740)={0x3, 0x7, 0x2000}, 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000680)=""/185) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000780)={0x0, 0x3, 0x3f, 0xb120}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="499d000021000078000004000100"], 0x14}}, 0x0) r2 = getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000003d10eb61fe7bad9a9ecab22fa4d6c300000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x80, 0x1, 0x5}}, 0x14) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:32 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_destroy(0x0) fcntl$setflags(r0, 0x2, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) getitimer(0x1, &(0x7f0000000280)) ioctl$VT_ACTIVATE(r1, 0x5606, 0x80000001) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="e3823e9ff759bfe93e5c2551759e870d567e7659452ba1f977f8de59fff9547506f6edc1b608a30a0a978de41e46d6", 0x2f) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) set_mempolicy(0x4000, &(0x7f0000000080), 0x8) 17:25:32 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x20, @local}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @rand_addr=0xfd8}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x47}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, @in={0x2, 0x4e23, @loopback}], 0x94) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="702f58d538c303bb52f0129f712387b61fde08da17a5cf2285cd788dc2203738eb628ee0899f3ee0b12fbedab87962bf076802a6eaad8bce068f5d4cc998903d2bc1364b0a84786c1e5ed49cef8e6fabbf60079175ff74999c11b22ea028f8ed426cd9b964130c1f68fe723cdd6fe45e35005a580fa1ac3705ff55b1d374c8777bfadaa75ecbd0a653a5db2d91fdcd1b7fb0f33975c1ddb23aa95210e7a2a23ba244f99b4921ba2c6f0e6de17b8e2acb627e243af5c9df68a656d405b9fa659fe8818ca4d16ed1b392e9b7df0a405599eaf53e0da57ae538984d033afc00b13f5332b2040e4f641164147818882d3f18b6", 0xf1}, {&(0x7f0000000540)="e7ca0da459dec6e9ed1fa22471f1a1d86f50d17def4860731c7dbd1be91d2789b7ad00c9de7f7e26fbd9e19498a401130f22b90cdca24ae889f4c7b5c68981bad440b7afa28dc58905248b48d66606b04d5a943c38d4fe1f26a5aff056c59ee6e5422193c9f211c87b56b52098eea3717979c55627dbc442207f7a24c2265985b2de1ed7fa31afd65e0a68166b692d45c6bd7ecc3ab6cdc487d2a4f75282e0f15768590efd90b5c78e8f787b333755f0beea53737749a49dbb147891e2d2db8a3e8e54aa", 0xc4}], 0x2, &(0x7f00000008c0)=[{0x110, 0x139, 0x7, "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"}, {0x58, 0x88, 0x6, "d3b3e776fdfcb47b37720ba22861072a437e5bbe8cd7ffa776070305bfd0909c9b86aa4f21eb7d945fab800a720964894d5a97d5a87b533d06e8f4357fef521ff30453d5"}, {0x1010, 0x115, 0x3, "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"}], 0x1178}, 0x5}, {{&(0x7f0000000640)=@in6={0xa, 0x4e20, 0x40, @mcast1, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="b7a6d98e599bc96335d448e49b69ab4909c2fabd22b4a21a2c4ea494ea7a14f8ba0e2461eb22c9232badc7eea4794c7a43d52bb16fcb4cdc6413f6a24ba370bf9210df7bb8686d3b088971234deb79e61f19650af7b7fc5ebf0930bf69e343601e8cb18e27886993880dd4e4faf5668b988478996dce4a2530893ef141fd09ebd79b604013f18b93648f910a3bc22a06523b97f5dd465f0c7e01b7b835e831f4f3e437318087b1d0874b80d3cdbfc26edc1f2470161d20c16da2ec17709967b4ca58b8712e2724f5b6bd0e77ba9507b8345b914d58a39cc8e403739492c13cf552ef9b1c26d48e", 0xe7}, {&(0x7f0000001a40)="b45092101d3b9041eef3a093ebfe4c12d8de893fc8a7d9fbd1b0fd16d2a6a4c8e96186f1d9f33c6d82384901c6759735fae3ba19464bd61b7286815d45e1cfead32a187e0cbcf31c5e87798dc357dc74ee7fecc51a9237b0904383fc79b9b4f967", 0x61}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001ac0)="d29568d51f5911d75025687c2d75b2d9bc6021be32ca4d22384d3481a27a18d431bfc6a90dc210f735c991949b5c07abf7078734e7e8046d3774e35172bceed01c65fa13459f0087cc966a9f841c91d6c5720454b80cca23ab017ec2d6cbe28962eea90d5f04296838255867489b69793e4a2f39e0fd5a33feb417800b4a", 0x7e}, {&(0x7f0000001b40)="e793719498bf208d53a224fb5772339852a052411a024789aa73f527395e85119d438682ffe5227ba5afe152d87e74e29530d705518392b756357414638370e4c4b5f41446de99a6cf27752ac137b4ff0e0cbeb15be6670f5d3447225696775cd186eff92f530103f3190294dc816d8c51808d568745fee97072b26e83142ab7caf3d9713968a3099b829cbdcd393de2076ab0babac3bd2159e76339502a55f4e9aec6521d44621bf35b58e38d9ce2f75d6c8d97b23b5c72799ebd450b2754875b1b7dd7338c742cc985c2cd2b255c", 0xcf}, {&(0x7f0000001c40)="6b37928b7a6debafd0a97bd38d35857c351321ef0d83ca8d2f51fe534c1deafb7df159fa8ff4d0aad000b669b49f6fd46e2a21fa631fd65077c01e3bb6ba3477247bcf5be926e08e3919d99dd2401754580a7603343c7c8faa27a8c1105698e9c35a50bea89058c4d35168f69f3550371cef75ebeb4781aeede6438ba8669b81c36bcedce651db2bb9c38365d37ce4118052431c235d614dcf63492b259be5323b3f8b40713c943508f6346f6c6cd963596ce0c60ea5c26c44626c99e6d05b92dc3bf82b4197450904d406cfffb2793d659475d30908f7755ae9bbad7036c4d482f06b9c511e0e10bae05d1b5f39d4", 0xef}, {&(0x7f00000003c0)="847856eea92a2f00c908a00d3c", 0xd}, {&(0x7f0000001d40)="d0546f50eff9fa6041a9f8f274fa0ec5496adca0d668dd465c5590ee5743aeff6144275bb84b30aa6ad2850be393094002512f598665452d086160bb26a4bc562e8e32d80227c334aeee581cb547bcc47c562780917f1355aaaf6345446b0c64d599ae35ba3f66760a3123feffa549c783b8f6cde9c00d6ebbe235e96489171a49a9eaa05e01b938116a5b8ffa0d165b2aee6939f3ff261036b7fe251d36539a548ba5cdd0577509c2cf3cc2de6bb53a25adbc16ec7587e074a952019cb169abef727e64da3780a7e6dd7eaa8650a6", 0xcf}, {&(0x7f0000001e40)="d211bebb33c60cbbce0ebf37eec07adce3673d3e98b07f320a41bdb3cdb2446c9f453711a49761caa8b0ba6128e3528261c6615b99b215f4bf6b0016c7bc37745d0ad28bb6c8997e8bff5c24b4c888068b368739a22d71b1497a9c1d96cc44c45f1ab7112ebe464ccae378702bbb7b5ec3a9f843aa51545ce9bcd7a47befe2a3bafb5dc4f5ee5a0bfa7c0c217f4f50f7c4", 0x91}, {&(0x7f0000001f00)="298e2938e5e8c1797f2e53e31d78c3ea9164ca564e0efa7d97a2c113adc778b9c0c3d86f81a4bed2b43815acc8c0f0d6c2d873c8258f061e89e5b6141549c82d18ffae08f7157a7541ca9e89c7225c7b7e1dcad225d4aba1c505f9cd3d15dbc0c6ef", 0x62}, {&(0x7f0000001f80)="a338b9a0de96dbb9ff12c81dc4338e441a2c49bc7500ffe3ad3c787fb72be037b3203f8931dc9d3944b50ca2e2dba4cdef74f8f358f2b5a9337a4007d907ce36811413cd08aa60282433a5be054cfbc51bfddd51c0e7780ba314d760bd979931053cc1b92a9c920f83abe2235ddbe1e70d4e1f0e026895e26e2b71f18cd9a6869eb5d37db034d24d6dd327437459f56a25125a734c4352f4a9f55724369852fd6e771be6c8ba2c979a7b0da985e4ba263c2c7079e1727b3ed6c4f394fb36506231a203bd99f4f16c332cbee6c925382aa7497a29e2c74784cae8b30b71c7", 0xde}, {&(0x7f0000002080)="d7c3e2063cde95a7c9db83c3af124e3c8186d917634dbe8162c2f2884fedd0257af46949bef09b26d5e92f81d20cfd432d50d4e988817b1701cc002f2e8e1e3e2742a4e7646a39d7ac6289b56f290655e973dadebc826b0a9c2a1664b11867ac5b29331806aecc96a801207c825ad0d3327dbfbd7a28c5035cb44ca5e3caa64b6ba4016b51b989ca5f479d6c7865a7f13d2a8133067ffa4cc24493a390e622a4c11bd1526e07db1a7fcf095356825740ffdeb6d0339699aec96cda596818606b3bd916aac0a15dc735ab1fbeb5245159932ce46fcf46621fd41e", 0xda}, {&(0x7f0000002180)="2e34c359c23cbda5d195f6e7f3b1db470034daa2cdbf39f7b89b6476d70f3b260ff5014bc46a0c868243e28fdda2657cc148f1fb5613", 0x36}], 0xa, &(0x7f0000002280)=[{0x110, 0x0, 0x8, "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"}, {0xa8, 0x11e, 0x1, "9a6dd2b3784f6722d0277f2fe127a739578a75ffee5d0d41d09ece5fab8c1dc89fe3d2c75fd2401bfbfa3640c450301b1c291ff9346b40dc2ef4e83fb7643991227ddd878811490ca3c006a442a1c52604078978a397ce07fc6708b66aed1d826a999186f1c3048da42b5961bce5d7144b29a4cca9a70e52650c1539107e6ba40c1329cb946ff35305033a0ba518e13d4b60d96f"}, {0xc0, 0x13b, 0x1, "e4577b032b6af26037ea138a6189f65f1780a02c55f0fa789f024af8ebb7ad95a4b93c01e21cfed867b99c805dfffc2a8c52949b0bfc1ec3fd9eb3ba33ad2ea2bf90712cd60ed90e9ec864f1b189a5f3eedb6613b38190fb70e07269d04fbd4160e35972c96009d2c3ecf151ee14c1b46f8b0ccdae7d9ce52aeabcec87f83d2f3f7d27da365e411c726b8d99a345b82d16bae10285e1361d47bfa14c4bd273fdab07c15eb12d89ce2a4bfb72b464"}], 0x278}, 0xfc}], 0x3, 0x20000000) [ 1620.890368][T23880] loop5: p1 p2 p3 p4 < > 17:25:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = dup2(r0, r1) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) sendto$packet(r2, &(0x7f0000000300)="8f088b96f2801efd2aa6267754a4e3687bd9bdd7ae52213b7be14c9d5aca7857b89eea47d35ab0727194549fd4b703994cbffc67e8dfb11b5275a00aaed76ad6fe517115bc25e44483f7ac503a925b0f22f46f44a1928db21eebcea3732782e195b617d213813dd556481dd8c8f726ee6caf59be645d39f3b42096d23c07b043eb7ec5d8b3e4c5094fd8663d4d0aa0023f6de9a4f0236617ee71af7ad4", 0x9d, 0x20000000, &(0x7f00000004c0)={0x11, 0xf5, r3, 0x1, 0x401}, 0x14) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000100)={0x5, 0x0, 0x301f, 0x3, 0x1, 0x44b, 0x6, 0x1}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x7, &(0x7f0000000540)=[{0x8c6, 0x800, 0x7, 0x80}, {0x3, 0x2, 0x1e60, 0x101}, {0xffffffffffffffe1, 0x0, 0x2, 0x9}, {0x7f, 0x7, 0xf61f, 0x6}, {0x32, 0x6, 0x0, 0x3}, {0xffffffffffffff81, 0xffff, 0x1}, {0x1f, 0x8, 0x9, 0x1000}]}, 0x10) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0x10) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000500)=0x1) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c9ee6a3f121c9c453ab2c92f6f37005c990ccd9acc83e0d4215bd548d09cba9e33588dbda6f07f2879444296023c930fe084a5f80d63e4a6246b443f3d706333833fab1a8f148922e9b0390ae1bd1ea0e83b9342a6e8a532259e672a2e2be5dcbc7ed7ea53aee2eb95c5006165d757e8460669d073031a44b1434f2b7d47b333dd3fe1412e9ddf1ccde08253ed1c6103173cd02668b82db5738bccc75db33485f467800afc988e7dba94d368aa26342bea72bfcafd022ac4a7db02f779ea68397dd0e97860a3b0e7deaf47c5ed7a80f14333b3162fcba06694b7ecce50c972bb3f6c1ad1849b5109deb885792bcb4d7c2b6c872a1c5757"], 0x1}}, 0x0) 17:25:32 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x3, 0x5216, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) write$input_event(r0, &(0x7f0000000240)={{0x77359400}, 0x12, 0x1f, 0xffff}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x440000) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) io_destroy(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) bind$rose(r1, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null]}, 0x40) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x105, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000240)={0x1, 0x9, 0x3f}) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz\x0f\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x1a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="001e0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004008ba76ffbb03582352328faaca0e20000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) tee(r2, r1, 0x1, 0x3) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:32 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e870000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) io_setup(0xfffffffffffffffa, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x144) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x406, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x800) io_getevents(r0, 0x8000, 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x77359400}) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1621.274733][T24029] loop5: p1 p2 p3 p4 < > 17:25:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x2000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a4ecf4f979ca7766b9b89a2e278777a151d6fe90e42c30569a09ceb015ad258de3c138e10cefd12b080fad1327b6e53429e3322b4817d2a205f0274a1ce9e1a9c8498619d4d5f7af2da7471194933a08e8e4a1eb81e08aadccb0ebddc1b3629d00e8b450d78203094544fc52c4137e2da73f73aa12eb2e2e1e247d89bb8082c380014d32ddc8fe92486f2ba508b93730376327f8ee997faccdc794964ec41c4492f76f6114e196c5cf2e7a3a37d635a54f18ff76528393139e91cf72f2dc789f1518a90a0714ff76a224b02121fe691b7be7b4ce20f6fb2f88f0845d3c135129cf32e849b0b4adb59021fe5bacc", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 17:25:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000200)={0x0, 0x3ff, 0x8, 0x2}, 0x6) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x6000, 0x5000, 0x4], 0x401, 0x9, 0xfffffffffffffff7}) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x68) [ 1621.591172][T24029] loop5: p1 p2 p3 p4 < > 17:25:33 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000060870000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:33 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x480, 0x0) dup3(r0, r0, 0x80000) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x30, 0x20100) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@buf={0x6f, &(0x7f0000000040)="f97de9565d2677d4357b40ad46433b9b4c861f642ed1f0f2e46a49f8f49cd7e2bf5c1faef124827bf0fe78f7e88ff37acce5bb8c2e2c55202d1ede2157ee249d8025011c7736beb5424b1e0eb0c75348c62051b1dd5ceba3ad6a2998fdbe1da2d0e8fb940e9ca4c28d9eb6bc676d6e"}) 17:25:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000040)={0xfffffffffffffc01, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1621.959831][T24051] loop5: p1 p2 p3 p4 < > 17:25:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x480c00) write$P9_RWRITE(r0, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x1}, 0xb) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x8101003, 0x0) io_setup(0x3, &(0x7f0000000240)) io_setup(0x9, &(0x7f0000000140)=0x0) io_destroy(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000000)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14e6ff00", @ANYRES16=0x0, @ANYBLOB="00060000000000004300b50447c966322fcebf3319642220894b0dc36fec6535cee5ba8eff5d81726bf49dc8695a3a0000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000280)={0xff, 0x8a, 0x7, 0x0, 0x0, [{r1, 0x0, 0xffffffffffffffe0}, {r3, 0x0, 0xffffffffffffffff}, {r4, 0x0, 0x6}, {r3, 0x0, 0x81}, {r4, 0x0, 0x3ff}, {r1, 0x0, 0x2f9d6038}, {r4, 0x0, 0x7fffffff}]}) 17:25:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffd1b, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3, r2}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x17ffc, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1622.381168][T24051] loop5: p1 p2 p3 p4 < > 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xad, 0x0) 17:25:34 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e880000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) r4 = getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0xb08, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) setpgid(r4, r5) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0x6, &(0x7f0000000200)=0x2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000060004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, 0xffffffffffffffff) 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1622.799792][T24188] loop5: p1 p2 p3 p4 < > 17:25:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) ioprio_get$uid(0x3, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000440)=""/221, &(0x7f0000000040)=0xdd) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x4, 0x401, &(0x7f0000000040)=0x2000}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="002bf403000000ec826927f31b00000009cb1fe56313245f6540df8e23fbe8852667efc0e7b5445e0644e7065975718a94b06a8ee588e51f2b5e62ce2ca9feb41ceb966b0843d247ef0a1e2880a15b580aaef8f1a57acc209dbe75a4eef4849dcd69528a3a5cd2aec7f7745fea84f60780b445edf4c68ab2", @ANYRES16=0x0, @ANYBLOB="0000b00000200000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1622.959222][T24188] loop5: p1 p2 p3 p4 < > 17:25:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+10000}, {0x0, 0x2710}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:34 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e890000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x3, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x20}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000280)={r5, 0xffff, 0x10, 0xd6c, 0x6}, &(0x7f0000000300)=0x18) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) 17:25:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00'], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1623.278622][T24310] loop5: p1 p2 p3 p4 < > 17:25:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x41fffc, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="830349557900ecb1c4657a529ec2bb2124909d8797918be66c3ca404faff5b72aaa83b829c1aba77a029f1699627a6db13af781a75454e21a4dbe72666a71af526a8bbf7a37493a857443f25646e6ffca3824cc92935e14a9637762fa2ae636c3684f7ce3717fc9b1ef088b9e2f1636a8659bcf217a72798083f891d88e2bbe7f5b080018569ebe177a48a9f3fc14b2ef3c395c629e8a78e494b4e364ed7d83ad3355c286960321489f5b941c82f8ad7d20600"], 0x1}}, 0x0) 17:25:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) chmod(&(0x7f0000000040)='./file0\x00', 0x28) [ 1623.826105][T24310] loop5: p1 p2 p3 p4 < > 17:25:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:25:35 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8a0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) mlockall(0x4) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 17:25:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(r2, &(0x7f0000000040), 0x3) listen(r2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x4, 0x8003}, 0x8) close(r2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 17:25:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:25:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000080000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1624.559494][T24557] loop5: p1 p2 p3 p4 < > 17:25:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x1b84fb9d, 0x4000) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0xa000000000, 0x9, 0xffff, 0x5, 0x7fffffff, 0x6}) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000076147de35ef3b2c2d883cce400f8c90000000000040088cfb6f07a7a61855d4e499ef3318dc999783b35ebf170a58c5794680b8ac99781214ebeba68f99d35067de785230e204dc290cf33f1b2f970dfa8d2338bda3e6d13ee8472553ecb455dc303063ed45ec405e3f929b0d1ebd9cfbb4b78fcbc29e4f616661dcb13af71000000"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x210082, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, 0xffffffffffffffff) [ 1624.678873][T24557] loop5: p1 p2 p3 p4 < > 17:25:36 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xffffffffffffff4a) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000200)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x100}, @mss={0x2, 0x2}], 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @multicast2}, 0x312, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)='team0\x00', 0xffffffff00000000, 0x8, 0x8c2}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000600)={0x6, 0x100002}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000030096000000000004000000493d807bdd3f3a32f390aa41c122b57fa6442cadb49b277f22887eebe1a6e292d18b01e630f0ab6586a2d7e582ba05bf6f3ab887c0273688e12fd9cb80349bc339dae2ca5806f3260af5a26787303cea1d6fe1eaa5afb9bf9a06578ffbedccd6343c0bb246630587f8356e1fb05946fe17ce0330c4236714e0"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="701300c18d91c14f54b7ca003ffd0716c191b7b0cd17ecec160a8ec5c55b82eeb133e2c679bc1bbad42544be2347d7544d94e5cc6216", @ANYRES16=r4, @ANYBLOB="0a0429bd7000ffdbdf25060000005c0004000c00010073797a30000000000c00070008000200070000000c00070008000200070000003400070008000100170000000800020007000000080002003d0000000800040008000000080003001f0000000800040007000000"], 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x40000) readahead(r2, 0x4, 0x4) 17:25:36 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8b0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)) io_setup(0xef8, &(0x7f0000000080)) io_setup(0x81, &(0x7f0000000140)) io_setup(0x3, &(0x7f0000000200)) io_setup(0x0, &(0x7f0000000240)) io_setup(0x9, &(0x7f0000000280)) io_setup(0x5, &(0x7f00000002c0)=0x0) io_destroy(r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000300)={0x18, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000478446f9cd7f1446b4e537249ec0521aca11a91599ca9b7cde8f7537f4c1d98a434aa7328d7ca3da9deee2454ceb84ec098e2447050cd2e1033a5e93eb5d98fc6923050f18f59c2bbc4b2afd54a53a8ace504e23cfe2363ee3f1f35e7577f5fd16779a970023379d2452fc36991c839cbaeafdaa809742e1fa6bfad47457b215a329026913f6be819846e668a51dceecbd285f827dc56b082d1a"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) write$capi20_data(r1, &(0x7f0000000440)={{0x10, 0x80000000, 0x8f, 0x83, 0x1, 0xe38}, 0xe1, "ac49ee47fa708c582989b9682b0b410e346fb825f6ee76e5591cf2e786491f9613e8cd562dd3f08f7e2172709f9b144b1488bb931cce7cbc0763adcc37971d75630ce1c1835bab285fe1ae86a0e9faeeaf48c2419b193bac26b9aea7e3697380cd8cb18e7353f1fd32b4bfbd175ff58c89835df20b6850e5f4355eede246c4f13749074563aea1dd9920e9c9b627e8b78a119496b5f1945fba9f8422ede0b54a297c633eb4a5b28cc5ed6be51c043bc128482d18b1f70de85c573c35462e2700f03f7b2acf7f59ed045c157f417d05970d2837aa5d0b0bd7479f343f85eac4d53b"}, 0xf3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) [ 1624.978465][T24579] loop5: p1 p2 p3 p4 < > [ 1625.135943][T24579] loop5: p1 p2 p3 p4 < > 17:25:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r2, 0x2}) 17:25:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f127086a80b7a408a27542dd877cc43547f5367bd23901b3092") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000280)="4e6f3e27fb61ff46f6613677670b57be4deaf61a28aeb21735239138ef843712c6d0859f5352fd802e0b408d3f9065a53a22820ba65b740df3aee7934d826fedc9a18b84ab154f6ce8628d44410321", 0x4f) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x400) bind$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:37 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000038c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1625.848992][T24704] loop5: p1 p2 p3 p4 < > 17:25:37 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x420000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, [], 0xa}, 0x4}, @in6={0xa, 0x4e21, 0x8, @empty, 0x7}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @local}, @in={0x2, 0xa, @multicast2}, @in6={0xa, 0x4e22, 0x200, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e20, 0x2, @rand_addr="aa6ca72ff408621c8187372d5a33398e", 0x401}], 0xd0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWRITE(r3, &(0x7f0000000280)={0xb, 0x77, 0x1, 0x89}, 0xb) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x9, 0x0, "eeebf100dcaffc1bd7ca7fa8b3567cf61f26c481698e06adc2c31aef316081e5", 0x5, 0x8, 0x80000001, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x2d, 0x3, 0x4}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:37 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) getpeername$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000200)=0x10) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x7fff) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r3) setpriority(0x3, r3, 0x4) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000280)=@generic={0x2, 0x6, 0x20}) [ 1625.986639][T24704] loop5: p1 p2 p3 p4 < > 17:25:37 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x100000001) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000040)=0x9}) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:37 executing program 2: clone(0x20200000, &(0x7f0000000200)="e7e4ef13dd314b3c162d2644438720d5dfd0f98efa851c90ecec3f38b14aee61f8ca04cf5a373d6cf8d5920f992490852795dd2ea994223b65673426c0571498da961abe31ffa7f1cf6feb0baa2da7fb", &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000280)="9fb9a385b350a4888fc040e3cfff25baabbdc500a064fc936b40652963d9970d4865fdad915ac317e99058e8d8f24efed0546e998155f949a52e6d580e2d533aab115626289a447972361ed2192d3c09ce42f89ed10e1678382e8c17f1a5fdf33173c81ef5c37cf389757809a0") perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1626.228565][T24721] loop5: p1 p2 p3 p4 < > 17:25:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="b06c98bfde111e5e25ed037f396f2dd6cddfae5dc2c31a2f76202e1f7531bc9479eec12be310d78bece55530911a77fb8d12105bddcdb42fb2c1c63d34d3a35248d1c4c6779ece37613546202a0e071715a4f9b5608428100b2f5a05cba496422c5cbe160cc7ffe1f6d63b09b0d92ae1b40969cb0d15bb84847e3b9d312fdf561ef578a192e0e5"], 0x1}}, 0x0) 17:25:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./coup\xafsyz0\x00', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="df7fffff0000a795000000000400"]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:25:38 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="03ff0100", @ANYRES16=0x0, @ANYBLOB="e094e3d7a3e0845f9fda20c179d50d7edbc1d01008af2ec9839d9268f4b64fd66a732ad2fdfbf05227913f5e03cb2fa495394f441b2ceaa41dd98e8813cf355acdce11ba8510366e"], 0x14}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', 0x1000}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x2, r3, 0xa1) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x69c, 0x5}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000300)=0x84) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f0000000080)="444dff952697bcde400faef78be71f", 0xf) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:38 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ffffff8c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1627.098685][T24851] loop5: p1 p2 p3 p4 < > 17:25:38 executing program 1: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000040)) io_setup(0x3, &(0x7f0000000080)) io_setup(0x80000001, &(0x7f0000000140)) io_setup(0x6, &(0x7f0000000200)) io_setup(0x6, &(0x7f0000000240)) io_setup(0xfff, &(0x7f0000000280)) io_setup(0x2a, &(0x7f00000002c0)) io_setup(0x8, &(0x7f0000000300)) io_setup(0x3f, &(0x7f0000000340)) io_setup(0x2, &(0x7f0000000380)) io_setup(0x9, &(0x7f00000003c0)) io_setup(0x4, &(0x7f0000000440)=0x0) io_destroy(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x35a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1627.284792][T24851] loop5: p1 p2 p3 p4 < > 17:25:39 executing program 1: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:39 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8d0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:39 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f066c7dbe478feea5d945296dfc0797319bca7fce78f812d90b8b64246b30d3c426dea5bacd0b6a0b6fde57ad6ce732b50d4b9a64a9a4209a738d40d26166e54f16dff5caafebf73071a9aed7853e3d6fd0b1db2d85d44c329264a0102c15546746aa68cfaa9ded3070a98b99a2689920eef52afe7970101144ce997b28c7a7450f0fce3ae10a377d0351ec85f8a1ee719a9211a8728dd1b81731b5d6e76c502bf8ff3408d40fc9d62"], 0x1}}, 0x0) 17:25:39 executing program 1: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1627.549220][T24964] loop5: p1 p2 p3 p4 < > 17:25:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) write$capi20_data(r1, &(0x7f0000000440)={{0x10, 0x80000000, 0x8f, 0x83, 0x1, 0xe38}, 0xe1, "ac49ee47fa708c582989b9682b0b410e346fb825f6ee76e5591cf2e786491f9613e8cd562dd3f08f7e2172709f9b144b1488bb931cce7cbc0763adcc37971d75630ce1c1835bab285fe1ae86a0e9faeeaf48c2419b193bac26b9aea7e3697380cd8cb18e7353f1fd32b4bfbd175ff58c89835df20b6850e5f4355eede246c4f13749074563aea1dd9920e9c9b627e8b78a119496b5f1945fba9f8422ede0b54a297c633eb4a5b28cc5ed6be51c043bc128482d18b1f70de85c573c35462e2700f03f7b2acf7f59ed045c157f417d05970d2837aa5d0b0bd7479f343f85eac4d53b"}, 0xf3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400007100", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1627.681361][T24964] loop5: p1 p2 p3 p4 < > 17:25:39 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8e0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xfffffffffffffffb, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x20) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="fbff0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00'], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00'], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) bind$tipc(r0, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x10) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0002000000010000800004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1628.429010][T24990] loop5: p1 p2 p3 p4 < > 17:25:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00'], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r0, &(0x7f0000000340)={0x90, 0x7d, 0x1, {{0x0, 0x7b, 0x10001, 0x8, {0x40, 0x0, 0x4}, 0x30300000, 0x1, 0x4, 0x80000001, 0x12, '/dev/loop-control\x00', 0x12, '/dev/loop-control\x00', 0x12, '/dev/loop-control\x00', 0x12, '/dev/loop-control\x00'}, 0x0, '', r3, r4, r5}}, 0x90) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) ioprio_get$uid(0x3, r2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}}, 0x5) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0xa, 0x101) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="fa01b6d288a65e314804659dff1d99db112a4b0787fa9f4d14dcea52a34215343079c068bc26a61f96e384dcc7b941c27e91571777fc088716b54a52a477c4b5567dc0f210b5152605fa0b209c55a25d945689faabe95455bfd67480aa34cb8a0f840e298ca45ff69b9686bdd7e5fd6a", 0x70, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x8385, 0x1}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b355a65ce1c250f11c1e3a38fbda33ded91098af190048e402e8e91e50931856c9540e52d72fa28ff0d9c275bec3f3b67249071abab841188ff1d2403071bb6b993943ae262504f812a6ae50f970dec0225012dd1111d6188de496f56d6bf003c0154d74756904dbd5f5063e24cf8cc8e683c404670e5468f0fb363072471991b81b5d0f96cd1ce2ca038d7c2adfc4e0612e0cae"], 0x1}}, 0x0) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) [ 1628.613820][T24990] loop5: p1 p2 p3 p4 < > [ 1628.667441][T25104] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 17:25:40 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e8f0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x100000000, 0x1) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000240)=0x4, 0x8) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) [ 1628.757011][T25106] 9pnet: Insufficient options for proto=fd 17:25:40 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fb2cc3e951f1f1f6744783fa3390d8e2cba7e32342acad587bad556e7a0849543504488e81ed898a0a7171b79a8f51ddc2131094fd0cb775680c7ccc34f6ee33370cf5f225ec64e19162f2cf9e545ce2db40e19c1c719bd6433c0d05693d3ca18bc40707098c0c40e80a5a45d9a92e3f691747b61829307e3a72abebe38c0adab9cabaefac5e9082eccc503d97c7173c649a1a7871eda26c2ebc3d5bd272cd0606457e4ea48cea99e13cc25bc5975cbe82e75399b4b87890224aef1c85e5e3833910ddd49b8a99036b937248fdd0a2043e569b723f455e7bedb2462988830b320895c7c48838a2e6d6842e703444036323", 0xf1}, {&(0x7f0000000300)="de5cff7f462560b1957d70a3e27191bab09bd9038bf4426b5a4aa45801be377bbd7aca6764f9eb25d1761881859c4c102fb0ed5910f635175f4f565b278473c33999f46f95f19287769980d91ed23bac9b61552eb12df5e37473f66b45dee18298dc25a6fa864233c444d13a0e1d3e5402612b7b9051a9ce4a904d34c077f59b42512286a7a2fa1318612d977b3a3814b4d87777f5d4957631fe27bb56386bcf1cd1bb611c7ef24eb8e52c68acd9f89c1234c1e6b495e4de851d56af", 0xbc}, {&(0x7f0000000440)="5f97a23e78eda9d4e17e9f5e07e13817093814954fb54f51e4077fb05bd60e68cc40e1bc0b37a700d847e86c5d13fedccb4c9ec7a80f2cdea82b745ebdf31238c58e67a3b74fd0a277148537ad71e56f6ee57e0891e486aac40009d81f62ab8bbd869a8351aac764b9f82a27ad40c341e6dc50bc6f162e1a66a9", 0x7a}, {&(0x7f00000004c0)="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", 0xff}, {&(0x7f00000005c0)="35802c3bcba9215c57a2eab5bd0795deefbc7ec9803d8eb00c99c5d08507f4d368f01ac79c49e640bedd4e480c991bf1c9e073705f52a4483adc9a491d65b0ce8385ac3ef13693d9a353ebdb1eac392e036f32ed09ca9d5efd1f732eef0c06adcc3f107d3c711e8aa0d12d23435dc2e6376a98759afe0c7956153d638b763ea9cec26de027aed3064212d5744fd625e7e2787638289b56cc90e6df68f67f58694613d50e2a89ca7c5b070fb8435a01563da408aae088a458d86c3398ceb0a291601ae6e6327f27cad69d7dccc7d1aaf1ca88827ad4bf8b492b0dce", 0xdb}], 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x1b) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000007c0)={0x0, 0x2, 0x6, 0x8, 0x3, 0x4, 0x80000000, 0xf7, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0x400, 0xffffffff, 0x8, 0x7}}, &(0x7f0000000880)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000008c0)={r3, 0x520}, 0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) move_pages(r4, 0x5, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000740)=[0x7fff, 0x1, 0x2, 0x100000001, 0x7], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r5, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x24040800) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) write$P9_RGETATTR(r0, &(0x7f0000000a40)={0xa0, 0x19, 0x1, {0x80, {0x10}, 0x40, r6, r7, 0x0, 0x3, 0xe531, 0x20, 0x8, 0x9, 0x899, 0x3, 0x1f, 0x7, 0x3ff, 0xfffffffffffffffb, 0x1f, 0xffffffffffffffdf, 0x9}}, 0xa0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="053ec9636d630edc4cc07f103ef19dc43360379f84d5346274ef90355797652744dffbbf8f70227c1cfe97c8d389955e7d2a3e0017b2060f241f2f76c908c0b5e616ea8982c7b6f99673395301d0b7dbc0cd62a62743d0"], 0x1}}, 0x0) [ 1628.861121][T25211] loop5: p1 p2 p3 p4 < > [ 1628.999036][T25211] loop5: p1 p2 p3 p4 < > 17:25:40 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e900000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000440)={"e9076b6344f90805f1038b89813e770ef0d0a766e1cea84b61ccd69bd032fa7cb07f36639568d1f1dd559df14c1b2359ac43f63e21b4ac6bd41e3b25d3aa5495de525b5fa817dc363fcb8f90fcc34805fcd08730ee021cfa5741997d105f29d6c4110d77afc40cac851012d7cbc6eb81f0912485389a4136ed8d87e3ab005330c8fd2196c18ab966f75439921dc4ead4ce3319fa627d4072e13a64afda45e97492536b7f9225b0dbf1f5732986e714d43cd6e4a0a4098aaabe8923bf245942c8610b1d710ae2d8592eb987d6fc9cef7a8c1d81b482c5768cdae0e190d4807ce8cf68406874764d0a3eb9454d147359e3b66393bca119bd4dd0506f78a8b6782cb661fa2bd028b5c29145874c26002fccd2ea3a72253b5731f7a76462f22f45dcbc301e8650bd057fb8d6f6df33c7be607f8f4a77bb0da38a0a48eaf9058b37a1bf08bc3022ef58195d91ec0185f94b2124a74d3702fe3a5b3d1b0fdcd177da745a77d6372bff34e560c124c2adf0b0abedb478873c9bf4940b66dff18907e98ea6018f96d4e18828077aeb973934654f76ea43adfbb921b7331a70d52c50bb784a29adcb4037eea093e8129a3d593e6a9c2b9a390ce5417adaf3b3108b3e5a4af1b2563b87d9a0da8d998b438bafca687ec433da7acf48cc77daf11941aaa04cf509b337234ab6e668084051babec9a4468189bdf921eb7185e9af3b73bbe73c1d4e9a2420592c79b957b91cf6f6eacb9f77119da009c063885f3cf7660aa756f63d7608a74d3691906888000304ffa9990d5b2122412e1a47e2c9e969094dfad31b34e63e1b79b1ab13ce48f162af93dd03b17d779fd8ee502ec12b2737c33429900a92300a042b5fc9a4901a4885ca4401deb805d44b96b2375cf5f4a86c602a23180df00e8cd1eaa8582c0dac6095d29c3fb04b804c5c4643a0bf428dc943a1d14aebc4d7f06083c3ab6d997456b749d1599bce5c3146e22d6623f9662f027baaa24afe1892c78aedca7ed776c04bdb16388ed5c90f8d67157d3643dee09366a05af56534364021b16d0ede2c7f6e800e0316b564bc9821ccb81a97a3325cf8b1001be2aafddd67f9133622878f241301ee3e2eaa04ea03dc17dd7639bf4cd6bce91b7f7862ee1d0f3539945585347477f1f9cd1eda107172f95d8180eccf12da75cf97704c6dd38c2fde5cc3ed035d66d8d5fffc6849021b8c77fe698e66f5d82f82a62d626933d77be72c5603961f630330cd873cfbd2c32b97c0602542fb63872e750a53036ca8168fbcb209ecf0759ad31b9398971ad5a25db7444e209d8ecd62a0a499a9ee334525b88dafeeeaee094deafe332d7c929f7ce474e9b02f2008859a0342920706ef1413aa111cb7f431dfe5f2ad9d2e6ade5386c005674c6aad0c6f5ef1170853adb66aa92e567ea94d56af86eb695a91879a5e99a5c9"}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="001c0004000000000000000300"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x94, &(0x7f0000000040)) io_setup(0x400, &(0x7f0000000080)=0x0) io_destroy(r1) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0xfffffffffffffff9, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x4f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) pause() ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="c60000000000edb1000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1629.228784][T25225] loop5: p1 p2 p3 p4 < > [ 1629.358814][T25225] loop5: p1 p2 p3 p4 < > 17:25:41 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e910000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000040)={{0x3, @name="d82b244f0c45027892ead8af5f6c5c7cc1d87ff5813958ee2a92f62122bac56a"}, 0x8, 0x8001, 0x89}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000040cf0222ed72c497468696eb00e756d8048b1bf88cbcbb", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b355a65ce1c250f11c1e3a38fbda33ded91098af190048e402e8e91e50931856c9540e52d72fa28ff0d9c275bec3f3b67249071abab841188ff1d2403071bb6b993943ae262504f812a6ae50f970dec0225012dd1111d6188de496f56d6bf003c0154d74756904dbd5f5063e24cf8cc8e683c404670e5468f0fb363072471991b81b5d0f96cd1ce2ca038d7c2adfc4e0612e0cae"], 0x1}}, 0x0) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) 17:25:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) rt_tgsigqueueinfo(r1, r2, 0x4, &(0x7f0000000200)={0x10, 0x7, 0x5}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x2, 0x7ff, 0x8001, 0x3ff, 0x0, 0x40, 0x80109, 0x9, 0x4, 0x4, 0x200, 0x0, 0x75, 0x2, 0x6, 0x1, 0x2, 0x8, 0x2, 0xff, 0x9, 0x5, 0x400, 0x100000001, 0x2, 0xfffffffffffffffb, 0x7, 0x3, 0x400, 0xf32f, 0x4, 0x1, 0x8001, 0x101, 0xfffffffffffff001, 0x800, 0x0, 0x80000001, 0x6, @perf_config_ext={0x1, 0x101}, 0x20, 0x100000001, 0x800, 0x7, 0x6, 0xf5, 0x7}, r1, 0x10, r0, 0x3) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14313f64050000000c000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1629.598995][T25236] 9pnet: Insufficient options for proto=fd [ 1629.605672][T25231] loop5: p1 p2 p3 p4 < > [ 1629.739163][T25231] loop5: p1 p2 p3 p4 < > 17:25:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="9e5b75c64031651e2eb0cf5db89f3fc6", 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:41 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e920000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000200)="f19d629101435fdc5704812ac581f4a46373d221eb6a4064227f3f73ae289fc2fe84b11ccd555c0f2840e42639f02423c65fa603ecd89b4495d7cf9002", 0x3d}, {&(0x7f0000000240)="54eed013111daccbc30c4c3615e6e5791a37c783acb485101f3786d748af5d8643c2d20cb61840c3aad033e8f2b13bc6f653f271ae079e45c528f4ce8783407c9d", 0x41}, {&(0x7f00000002c0)="7f45da5677ca7f6519b7", 0xa}, {&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="6cf86a8a4210be0e3dc3dad85bb1d937f4d5ec18680859d4cf197994ff6b831de6e02f2ecc6ca53190587fce41fbf7bfc82a9f92b16c02eb833eedf77f3087137f5a01c5d05de086ea471a87f43f4cebc79798729d117a11e0175e495ff54c0d0176c932d69a82e3b1fd704cb8ad94dcb6cf202526d5ae36fef7490615f4edae4155bdf59978495ee475c37acff39236a550c725c976da6dbc9e8ede36259d634338837af3439c6dff5961d8430837debb870971a1837a4e81c3957e4a75fab4f04fc8878457c12af9d50b7c92355a3a0d84f83a", 0xd4}, {&(0x7f0000000500)="6e1fe51979e15138e2d6fcab31bec94aceaeeb4dfceb9e41c0874f7b286b0fc578bfc2cd823df9964dc4a731272e988b855af0a02303ae7f09295bc97e9b60bc8ad2491011ee429653512b9d70c51c8e6af3069f50dcaec80a60a8b23be4e5ad69db618b67c0f236bdb61b1d1140b80b47b1ac32bb7f027004b16cea0c45163737fdb5c77fa0ab22e4e6433b6e6c3a400fb540b355ddeba6d5a5ca1bf2f70c6b4af15dc24e45e0adebf2b22210fcd459d570ef67556efafd7ea7467134bf35d80fb0b56f6c53816828fe601217d278b1ca87351df822b8d6b2f35f42f14c3cdd3f0bf6a2093463", 0xe7}, {&(0x7f0000000600)="f609886dfd4e40ec7aac58d6d00fb39b120d5b86400d91e158cb5852bfcb94164d3636b703d2895faa1a14640f8f532d580561d787fb447392e91ec7b13edc8c0deae3908b09994c9d58306969fa7086b10cd3363c0d7d6d4c5cc63e00ca67a0d20870052d289d212065e0562cb51f2b62fffc7a2fa8f9787d4415f3da3793d46b466ca44d7c2f52386494d9eaf17e48da5ddd01817d241844ad713d47d7ddfc1cf62d1c042474fbd88d23307ae217bad25ba476c50f10292ed5b2c161088cb5d5f8e75e9d3efc", 0xc7}, {&(0x7f0000000700)="03493ca075169244d37dfec0dc145de7e686f60e7cd9a90c4191a0bbc357ca3d63aca06c30bf97d3b0284d", 0x2b}], 0x8, 0x0, 0x0, 0x4000000}, 0x20000000) preadv(r1, &(0x7f0000002e40)=[{&(0x7f0000000940)=""/178, 0xb2}, {&(0x7f0000000a00)=""/107, 0x6b}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/205, 0xcd}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/216, 0xd8}, {&(0x7f0000001d00)=""/128, 0x80}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/133, 0x85}], 0x9, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='ip6gre0\x00', 0xfef1) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x100000001, 0xa6, 0x4, 0x6, 0x10000, 0xffffffffffffeb70, 0x8, 0x6, 0x0}, &(0x7f0000000880)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000008c0)={r3, 0xffff}, &(0x7f0000000900)=0x8) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b65838ea0956b2da3331ab0e2c309628a69bd6d3dbe44aa129b2bc090f16eae51838000000008534000000"], 0x1}}, 0x0) accept4$inet(r1, &(0x7f0000000800)={0x2, 0x0, @remote}, &(0x7f0000000840)=0x5, 0x800) 17:25:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14b74e8828c49b061e5c25ee5f6b000010", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/251, 0xfb}], 0x10000000000002c2, 0x0) [ 1630.006084][T25348] loop5: p1 p2 p3 p4 < > 17:25:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x40) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000916102ced829874a7a800397bbcd04317babd479235e19024eac3691358a5f7059e577a82ca353d9624d581a5153a323a9fc9115e3adf33e48d03b2e608cc342a3751f0db391b2fbc9b4c78a7ba416f0342f103e59cb0c29473fcca2cc3f6a6e6d3bf4c3832386484ed327168fe8b2cf4946d7d953e850b8eb15a9005f7fcdf734a16978a0b08fed07f7f2a0a0343da7242c6a9a0c5244fd63f97feb1a473ef04e68f2b869f634e12ff337c72b190d250af164cd000000000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1630.144891][T25348] loop5: p1 p2 p3 p4 < > 17:25:41 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x8000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x8e282, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:41 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e930000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:41 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000040)="b7f2a43d", 0x4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0xff}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r3) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1630.322065][T25468] loop5: p1 p2 p3 p4 < > 17:25:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b355a65ce1c250f11c1e3a38fbda33ded91098af190048e402e8e91e50931856c9540e52d72fa28ff0d9c275bec3f3b67249071abab841188ff1d2403071bb6b993943ae262504f812a6ae50f970dec0225012dd1111d6188de496f56d6bf003c0154d74756904dbd5f5063e24cf8cc8e683c404670e5468f0fb363072471991b81b5d0f96cd1ce2ca038d7c2adfc4e0612e0cae"], 0x1}}, 0x0) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) 17:25:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 17:25:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000718fefdacd8ad6d63ada1dc2f087d03d1c31c750521bcaf384eddac9d99475466aa17cba081ae1513a811ee08fa59a6b44614f95537da4082fb91c5738ff45c28568dccd28b54955c057f98e8e56131a7573c6fd46b929ea692854ce631c744edf0a128ed1217a521ec64a90cf4265a36e8d264b8ece31a930da6440e17fd9d2e65a8810a4213ac99796c133d7667e53e59c042cf7168d6c6d226d7248f3acdbec84d8a0c595969fa5bde6f1d69712f774f6d1d2fbf96cb45e9ffb4ee8a3324fb42e43f0d364", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1630.468697][T25468] loop5: p1 p2 p3 p4 < > 17:25:42 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e940000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1630.547086][T25478] 9pnet: Insufficient options for proto=fd [ 1630.661999][T25484] loop5: p1 p2 p3 p4 < > 17:25:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000140), &(0x7f0000000300)) setreuid(r2, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1630.798638][T25484] loop5: p1 p2 p3 p4 < > 17:25:42 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e950000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x1c}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x20, @rand_addr="67ec301c7f35ef0005f4e82e9abddabd", 0x4}}, 0x9, 0xfffffffffffffffa, 0x7, 0x6, 0x200}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x6, 0x8, 0x401, 0x1, 0x81, 0x7, 0x2e, r2}, &(0x7f0000000140)=0x20) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1631.001759][T25491] loop5: p1 p2 p3 p4 < > [ 1631.162895][T25491] loop5: p1 p2 p3 p4 < > 17:25:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:42 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e960000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="b355a65ce1c250f11c1e3a38fbda33ded91098af190048e402e8e91e50931856c9540e52d72fa28ff0d9c275bec3f3b67249071abab841188ff1d2403071bb6b993943ae262504f812a6ae50f970dec0225012dd1111d6188de496f56d6bf003c0154d74756904dbd5f5063e24cf8cc8e683c404670e5468f0fb363072471991b81b5d0f96cd1ce2ca038d7c2adfc4e0612e0cae"], 0x1}}, 0x0) 17:25:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="87b6f205201104737e90712b91ec33b91d01a339124224252e97217d562bbd9fea7ced89ffca946eeeb61bddde39bca64754fb0c4171ec74be4b589a2f18115ff5f5edf5892773a00ca0c378302e8b5deced617b3debc2108ae1f9908e5bfef8eab06b1dd0b8a702d0814fbfe46dfa8b93a7280c0000002e511ff1842c780e6251210e9e24bd337a87320fe1c3171de6d714ffc10dbc77727fabe573fb608236fe9050ee5aab8729da56635178f9192e7f50ea5a05f995be336bfe69d8a1fe5d361d4d1c8a700ae08bafe086f614e73f4fe85565c2e98d4bdc59c891e59388f041c3d41aa12a"], 0x1}}, 0x0) [ 1631.439864][T25580] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x6be7f28e, &(0x7f0000001500)=0x0) io_destroy(r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="040000000000", @ANYRES16=0x0, @ANYRESOCT=r4], 0x3}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$unix(r1, &(0x7f00000014c0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000000)="08dd648a0682ace0c278f98819c02cf5dbe05cd88393c1c2da6ffbf5dda221a7", 0x20}], 0x2, &(0x7f0000001440)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r0, r5, r0, r0, r0]}], 0x48, 0x24004004}, 0x40) time(&(0x7f0000000040)) [ 1631.478604][T25605] 9pnet: Insufficient options for proto=fd [ 1631.588359][T25580] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e970000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x6, 0x7f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000140), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0x11, 0x40, 0x9200, 'yam0\x00', 'syzkaller1\x00', 'ip_vti0\x00', 'lapb0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x1a}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x70, 0xa0, 0xf0}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0xfff, 0x2}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x3, 0x8aff, 'dummy0\x00', 'syz_tun\x00', 'gre0\x00', 'gretap0\x00', @local, [0xde93082631c6705a, 0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0xa0, 0xa0, 0xf0, [@connlabel={'connlabel\x00', 0x8, {{0x1ff, 0x2}}}]}}, @common=@log={'log\x00', 0x28, {{0x2, "dcb89f79fcb928722d1a736a6deae5a187d9c1b75840d0fa76860cb92b72"}}}}, {{{0xb, 0x0, 0x9100, 'tunl0\x00', 'vlan0\x00', 'veth1_to_bond\x00', 'ip6_vti0\x00', @random="a437187c53d9", [0xff, 0x0, 0xff, 0xff], @link_local, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc0, 0x140, 0x170, [@nfacct={'nfacct\x00', 0x28, {{'syz0\x00'}}}]}, [@common=@log={'log\x00', 0x28, {{0x75afc8fa, "e4440730e4f6677abe9f5f91b30bdb9dd9838823238bd35ef6e3784f393d", 0x1}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x1, 0xc, 'eql\x00', 'veth1_to_hsr\x00', 'rose0\x00', 'veth1_to_bond\x00', @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @dev={[], 0xd}, [0xff, 0x0, 0xff, 0xff], 0xa8, 0xe0, 0x110, [@realm={'realm\x00', 0x10, {{0x8, 0x2, 0x1}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}, {{{0x7, 0x46, 0x0, 'gre0\x00', 'ip6_vti0\x00', 'eql\x00', 'gretap0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x158, 0x190, [@rateest={'rateest\x00', 0x48, {{'bpq0\x00', 'veth1_to_bond\x00', 0x8, 0x1, 0x4, 0x0, 0xfffffffffffffffa, 0x3, 0x3, 0x3c}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@ERROR={'ERROR\x00', 0x20, {"047a7f827f8e077ca922274c158715d1936ff2d7623e68a0df82292508a2"}}]}, @common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x5, 0xffffffffffffffff, 0x1, [{{{0x3, 0x4, 0x88ae, 'nr0\x00', 'ip_vti0\x00', 'irlan0\x00', 'bridge_slave_0\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0xd0, 0x148}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x40}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x400, 0x5, 0x7fff, 0x1, 0x0, "d6778268fbe4e731a37f1197bc3bfd8c593c1c50604a21a08521fd43c20af71701ef24b4f4a26335f2323779cbc3a13de77d3124c9a71318ac97c752bf943233"}}}}]}]}, 0x870) io_destroy(0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)=""/59, &(0x7f0000000080)=0x3b) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xffffffffffffff3e, &(0x7f0000000cc0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x1, @local}, @in6={0xa, 0x4e20, 0xfffffffffffffc01, @ipv4={[], [], @local}, 0x1}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @multicast2}, 0x5}, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @loopback}, 0x100}, @in6={0xa, 0x4e23, 0x100, @empty, 0x4}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000c40)=@assoc_id=r2, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000c80)={0x84, @multicast2, 0x4e23, 0x4, 'nq\x00', 0x30, 0x2, 0x80}, 0x2c) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x4, [0x9, 0x56a336c3, 0xff, 0x9]}, &(0x7f00000002c0)=0xc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1631.789501][T25614] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="781a416e28a4e5013344ee156f07fca2", 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1631.911118][T25614] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e980000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1632.119551][T25627] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) [ 1632.268492][T25627] loop5: p1 p2 p3 p4 < > 17:25:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:44 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e990000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1632.336789][T25639] 9pnet: Insufficient options for proto=fd 17:25:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1\x00', 0xffffff61) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x800, 0x800) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000200)=""/4096) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000200)={0x9, "28527a1ff0c6294b16d7ae604356b239a21452b93b8a8f9ec40ec212b482490e", 0x220, 0x4207, 0x80, 0x1, 0x3}) [ 1632.469763][T25724] loop5: p1 p2 p3 p4 < > 17:25:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b030e975b617a60eb8c20c3ed3c0c38a9a4d0215f49ce920d737aa17bc1b0712f6b64856d4ec22fe203d826f416fba540f0efe90c0872e"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001280)=@broute={'broute\x00', 0x20, 0x4, 0xe50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000400], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xf, 0x4, 0x88ef, 'bcsf0\x00', 'hwsim0\x00', 'ip6erspan0\x00', 'bond0\x00', @random="faeb57b75156", [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @random="94e9b7ec3b43", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x70, 0xc0, 0x138}, [@common=@log={'log\x00', 0x28, {{0x8001, "f4f5003d765b4ce83e567ceb23b7c41a2c8f754d899399a904daa854cb82", 0xb}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x2e73, 0x37, 0x2, 0x0, 0x0, "d0c4f6ecc38770cfd14d7f6dcd958dce0b36b64e65ac4c7831c3eef25dea503f9274454541e71b7076d9fd5207b3f634e9286543e5c3d18992c00b15b2e0212b"}}}}, {{{0xd, 0x10, 0xe84d, 'hsr0\x00', 'vcan0\x00', 'nlmon0\x00', 'team0\x00', @dev={[], 0x1d}, [0xff, 0xff, 0xff, 0xff, 0xff], @random="cf2f35247f3c", [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x100, 0x100, 0x148, [@limit={'limit\x00', 0x20, {{0x401, 0x8001, 0x19, 0x2, 0x10001, 0xe8}}}, @limit={'limit\x00', 0x20, {{0x126, 0xf9f, 0x3, 0xfffffffffffff001, 0xea, 0x7fffffff}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"126329bc19563f0a9c6aefbeecbf86327218ccd4392178a6eaa815539166"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x19, 0x8, 0x8100, 'rose0\x00', 'ipddp0\x00', 'lo\x00', 'syz_tun\x00', @random="59e1d76acc1f", [0xff, 0xff, 0x0, 0xff], @random="b3c2759c1377", [0x0, 0x0, 0xff, 0x0, 0xff], 0x980, 0x9e0, 0xa30, [@among={'among\x00', 0x8a0, {{0x4, 0x1, 0x1, {[0x8001, 0x9, 0x0, 0x4, 0x6, 0x18, 0x3, 0x1, 0x5, 0xffffffffffff7fff, 0x6, 0x100000001, 0x9, 0x9, 0x2, 0xfffffffffffffffe, 0x3, 0x9, 0x6, 0xe1fe, 0x8, 0xb34d, 0x2, 0x0, 0x9, 0x80000001, 0x44b6c951, 0x4, 0x1, 0x2, 0x5, 0x3f82, 0x9, 0x0, 0x7, 0x4, 0x9, 0x8001, 0xffffffffffffffff, 0x1, 0x0, 0x9, 0x0, 0x1b9, 0x6, 0x0, 0x0, 0x20, 0x2b, 0x4, 0x9, 0x0, 0x3860, 0x5, 0x1ff, 0xaa, 0x8, 0x6, 0x6, 0xffffffffffffa4fd, 0x8001, 0x100000001, 0x5, 0xfffffffffffffffb, 0xc15, 0x1, 0x1, 0x7, 0x6, 0x20, 0x0, 0x4, 0xb0, 0x7, 0x4, 0x6, 0x3, 0x3003, 0x3, 0x6, 0x5, 0x2, 0x6, 0x8001, 0x3, 0x8, 0x1, 0x6, 0xb9d8, 0x1, 0x8, 0x6, 0x8, 0x4, 0x3, 0x2, 0x5, 0x67194004, 0x10000, 0x0, 0xfffffffffffff561, 0x81, 0x4, 0x7, 0x7, 0x4e8c, 0x80000001, 0x80, 0xffffffff00000000, 0x4, 0xf0ed, 0x800, 0x8001, 0x800, 0x9, 0x6, 0x80, 0x1f, 0x200, 0x9, 0x8, 0x7, 0x800, 0x400, 0x6, 0x100000000, 0x1ff, 0x0, 0x24b, 0x81, 0x4, 0x9, 0x1000, 0x8, 0x0, 0x100000000, 0x8a5, 0x7f, 0x20cb, 0x3ff, 0x678, 0x4fc, 0x10001, 0x0, 0x9, 0x4, 0x1f, 0x3f, 0x3, 0x1, 0x1, 0x6, 0x401, 0x6, 0x93, 0x10000, 0x6624, 0x1, 0x5, 0x1, 0xffffffffffffff9d, 0x4ca7, 0x4, 0x6, 0x8, 0x81, 0x4, 0x7f0000, 0xf6, 0x1, 0x8, 0xfffffffffffffff9, 0x71, 0x4, 0x3, 0x1ff, 0x1000, 0x5, 0x100, 0x7, 0xfffffffffffffffe, 0x4, 0x8, 0x2, 0x9, 0x36ab32d0, 0x43, 0x7fff, 0x6, 0x9f6, 0x2, 0x8, 0xc0000000000000, 0x6, 0x101, 0x6, 0x2, 0xcf71, 0x9, 0x1f, 0x1, 0x3f5, 0x3f, 0x633c, 0x4, 0x4, 0x20, 0x1, 0x7, 0x5, 0x5, 0xffffffff, 0x9, 0xecc7, 0x73a, 0x0, 0xdf, 0x9, 0x7d3, 0x2, 0x800000000000, 0x8, 0xf33, 0x4, 0x0, 0xe3, 0x9, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x6b75f96d, 0x8001, 0x3, 0x3, 0x5, 0xffffffffffff0001, 0x4, 0x3, 0x4, 0x403, 0x3f, 0x274e, 0x6, 0x2, 0x1, 0x2, 0x7, 0x3, 0xecd4, 0x100000001, 0x60, 0x10000, 0x79, 0x9, 0x101, 0x64f], 0x8, [{[0x0, 0x6], @rand_addr=0x40}, {[0x2, 0x2ea07906], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x0, 0x8], @remote}, {[0x100000000, 0x6], @remote}, {[0x81, 0x566], @dev={0xac, 0x14, 0x14, 0x27}}, {[0x1ed2c, 0x10001], @dev={0xac, 0x14, 0x14, 0x18}}, {[0x6c, 0x8], @empty}, {[0x3, 0x3], @multicast1}]}, {[0x7, 0x8, 0xffffffff, 0x101, 0x0, 0x10000, 0x0, 0x7ff, 0x4, 0x7, 0x80000001, 0xfffffffffffffffe, 0x0, 0x5, 0x12000000000000, 0xf4, 0x2, 0x10001, 0x20, 0x81, 0x2, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x4, 0x4bf, 0xfffffffffffffff9, 0x6249, 0x40, 0x1, 0x9471, 0x7, 0xf912, 0x800, 0x0, 0x1, 0x7, 0xf6, 0xfffffffffffffffa, 0x3ff, 0x6, 0x7, 0x0, 0x18, 0xff, 0x5a, 0x7, 0x100000001, 0x7fffffff, 0x80000001, 0xfffffffffffffff7, 0x7, 0x81, 0x119, 0x8, 0x800, 0x3fffffffc0, 0x6, 0x0, 0x8, 0x80, 0xffffffffffffff80, 0x3ff, 0xd5, 0x3f2, 0x43, 0x882, 0xffffffff, 0x2, 0x7, 0x1, 0x3, 0x5, 0x10001, 0x5, 0xfffffffffffff800, 0x6, 0x3ff, 0x401, 0x1, 0xa1f, 0xff, 0x5, 0x8, 0x1, 0x7, 0x7, 0x7, 0x5039, 0x100000001, 0x80, 0x8, 0x400, 0x1, 0x6, 0x1, 0x5, 0xf52, 0x4, 0xff, 0x7fff, 0x6, 0x5a3, 0x51, 0x5, 0x6, 0x9, 0x1, 0x8009, 0xff, 0x0, 0x8000, 0x7, 0x0, 0xfffffffffffff001, 0x5, 0x6, 0x1, 0x4, 0x200, 0x1e, 0x2, 0x7fff, 0x9, 0x101, 0x89d2, 0xc94, 0x8, 0x1, 0x3, 0x80, 0x89ec, 0xf29, 0x30000000, 0x8, 0x19, 0xe42, 0x2, 0x0, 0x0, 0xffffffffffffff01, 0x71, 0x3, 0x7, 0x5c5e, 0x8, 0x200, 0x2, 0x2, 0x5, 0x80000001, 0x6, 0x9, 0x4, 0x2, 0x6, 0x4, 0xfffffffffffffff9, 0x0, 0x101, 0xfff, 0x3, 0x9, 0x100, 0xffffffff, 0x2f1, 0x3, 0x20, 0x7, 0x351, 0x6, 0x3, 0x910, 0xfffffffffffffff7, 0x2, 0x2, 0x7a7, 0x3f, 0x3ef, 0x4a59, 0x0, 0x2, 0x6, 0x1f, 0xffffffffffff0000, 0x400, 0x0, 0x7, 0x6, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x6, 0x7, 0xbe9, 0x101, 0x1000, 0x1, 0x5, 0x9, 0x3, 0x8, 0xfffffffffffffff9, 0x5, 0x6, 0x3, 0xd4c, 0x2, 0x1, 0x8, 0x4, 0x6, 0x8000, 0x400, 0x6, 0x1, 0x9b7, 0x1000, 0x1, 0x10001, 0x3, 0x2, 0x0, 0x6, 0x100000001, 0x10000, 0x6, 0x7fffffff, 0x100000000, 0x8, 0xfffffffffffff001, 0x2, 0xc4f2, 0x1a, 0x5, 0x8, 0x7f, 0xab31, 0x6, 0x8001, 0x4, 0x138279a5, 0x400, 0x2, 0x9, 0x8, 0x7, 0x1, 0x81, 0x8, 0x3], 0x3, [{[0x6, 0x7], @rand_addr=0xffffffffffffffff}, {[0x8001, 0x27], @rand_addr=0x8}, {[0x7, 0x87], @rand_addr=0x3}]}}}}, @ip={'ip\x00', 0x20, {{@local, @loopback, 0xff000000, 0xff000000, 0x3, 0x89, 0x4, 0x8, 0x4e23, 0x4e20, 0x4e21, 0x4e22}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x0, 0x6}}}}, {{{0x1b, 0x8, 0x6af7, 'gre0\x00', 'teql0\x00', 'veth0_to_bond\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0xe0, 0x110, [@mark_m={'mark_m\x00', 0x18, {{0x3, 0x400, 0x2, 0x1}}}, @vlan={'vlan\x00', 0x8, {{0x2, 0x3, 0x201, 0x1, 0x1}}}]}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0xec8) [ 1632.528744][T25750] 9pnet: Insufficient options for proto=fd 17:25:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xfdfffffffffffffe, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(r0, 0x0, 0x403) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1632.598494][T25724] loop5: p1 p2 p3 p4 < > 17:25:44 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9a0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1632.655560][T25759] 9pnet: Insufficient options for proto=fd 17:25:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="922aed6f", @ANYRES16=r1, @ANYBLOB="080025bd7000fedbdf250b0000002c00090008000100800000000800020021010000080001007f000000080001000900000008000100060000001400090008000100212a2e700800020001000000240002000800010000000000040004000800020004000000080001008000000004000400640007000c000400e1010000000000000c0004003f000000000000000c000300070000000000000008000100010000000c000300080000000000000008000100020000000c00040005000000000000000c00030001000000000000000800020003000000"], 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003a8c6f9d2af6d5dce17a20bc7746dad341f66e4fbbb934961608c7b46725e8790ccc1d609100e4e28b849deff4fd31d35c77311423a1e981c1b73f7ada74e3e095378faf9557ceeae067ae328d0cfbaa2e39f6332797d7334120e86ca5753abe3b", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 17:25:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040), 0x4) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x2, 0x1, 0x6, 0x1, 0x6}, 0x9, 0x7ff, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x6, 0x98d, 0x40}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) 17:25:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 1632.834543][T25771] 9pnet: Insufficient options for proto=fd [ 1632.841508][T25768] loop5: p1 p2 p3 p4 < > 17:25:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x40) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf2, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x4}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1632.976582][T25776] 9pnet: Insufficient options for proto=fd [ 1633.005051][T25768] loop5: p1 p2 p3 p4 < > 17:25:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x802, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="060000000000000000000400000041a658f0df345616fa324eb29e1be7c2480552c8074b888dbec58e8941be2f2b265a96f39e7cfb2951b5dfb3067e9b803d42df47ebd45061f8e275b8c7309635dc93c68e8be79d24d9bcc98dafc5da9012ef66c7d0214941ebec762c06b59b91dba51711980e422d7dab91adcaf31227a97c8f1c32d79fa54bb87718125906b56430b7e87139435df1ff1260df7873ab5b840b245d5f31c62d892630403333147f8cb19b011f4a5a4dba42a657160df57892ec198db312f1ab50ca95989925556b155546205b00"/224], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30, 0x341, 0xdc}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x7}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x5) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:25:45 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9b0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40002, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x10b, 0x7, 0x6f4, "8442621b1decf13f3a1079a58630a834", "5770ab347648aee4a73050042a1b8aa1361e59b521e1c795a6524a9f9ab43106f5d427c1fbf752d88d0d9b569ab16854740ada7821cebae57e739c8560e6fc82f55c75067b33d6bc2b7c7f6e885709e7fdc12fa6be5d152fd37ef8010c90557b28addc9b953305d6de964d926f94d8e21c5a9d0f5785b85481d93a2f98cd74647b8676cf9a56aebe0f1bbb8e2c189278a90e336d6e0ce16e7036273615387c18585b3d220e95a6095ae7d764c8ee747c69f4ad576af52882ca9da1ed3073fc5a4e97dfe284bc8abfeb7902d626a56d3d51bd0a53bfd5079975657c43ea81f0449bfb4a742babe7c9264e9c9497bc35fa96c966fb7339"}, 0x10b, 0x1) 17:25:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1633.493012][T25888] 9pnet: Insufficient options for proto=fd [ 1633.508516][T25890] loop5: p1 p2 p3 p4 < > 17:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:25:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1633.628455][T25890] loop5: p1 p2 p3 p4 < > 17:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 1633.666746][T25900] 9pnet: Insufficient options for proto=fd 17:25:45 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9c0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 17:25:45 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) rt_sigreturn() ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x15) [ 1633.948522][T25908] loop5: p1 p2 p3 p4 < > 17:25:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r1, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 1634.098462][T25908] loop5: p1 p2 p3 p4 < > 17:25:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x7, &(0x7f0000000500)="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") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0xfffffca8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x4, 0x800) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="510432041ff05d713d233fff9d206b1ac890228d92c79dc5c99f8875e2becca046faa2f168ae451decf240e842e6326368aa9a9de85081ef1ba63edf48f670376aa574"], 0x1}}, 0x0) 17:25:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000040)={0x8, 0x1, {0x57, 0x6, 0xa77, {0x81, 0x7}, {0x101, 0x400}, @cond=[{0xa8, 0x3, 0x9, 0x4, 0x80, 0x6}, {0x4, 0x7, 0x8, 0x7, 0x1, 0x6}]}, {0x57, 0x7ff, 0x5, {0x400, 0x3dd8}, {0x5, 0x7}, @const={0x10001, {0x7, 0x8, 0xfffffffffffeffff, 0xff}}}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) 17:25:46 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9d0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='rose0\x00', 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 1634.435374][T26020] 9pnet: Insufficient options for proto=fd [ 1634.475618][T26021] loop5: p1 p2 p3 p4 < > 17:25:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), 0x4) [ 1634.566386][T26029] 9pnet: Insufficient options for proto=fd 17:25:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 1634.610004][T26021] loop5: p1 p2 p3 p4 < > 17:25:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000075000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:46 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9e0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1634.719216][T26036] 9pnet: Insufficient options for proto=fd 17:25:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e1f, @empty}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno'}}) [ 1634.819449][T26041] loop5: p1 p2 p3 p4 < > 17:25:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = msgget$private(0x0, 0x180) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/99) write$FUSE_DIRENT(r0, 0x0, 0xffffffffffffffef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00005efacd810000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet(0x2, 0x4000000000000001, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1634.923242][T26045] 9pnet: Insufficient options for proto=fd [ 1634.969419][T26041] loop5: p1 p2 p3 p4 < > [ 1635.063430][T26052] 9pnet: Insufficient options for proto=fd 17:25:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e22, 0x1, 'wlc\x00', 0x7, 0x9, 0x3e}, 0x2c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:47 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010e9f0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1635.449046][T26159] 9pnet: Insufficient options for proto=fd [ 1635.458279][T26161] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xe52/0xf80 [ 1635.468530][T26157] loop5: p1 p2 p3 p4 < > 17:25:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:25:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2efca6566bbf6b7ad51dfc40ace325b0bbea4cc540daf64ff87ab2de315432189eb7e348c061be73bca56d61499925f8c914e0d92fb7850fc90517a27d7391a46bccd29fbf28873c86f8338626c78f3eba1a9c004c5dba090a915d9111000d7ef7ffad0d44f124b4f7d344884e2ac3795c51facd86414d9cf54043135657893b56f4274b851647d8c8c885fbca871674922396a6bcf53e3c0cc483d5cdd68efae435c76b9d007c37ff0a4ba5fc8dfa89635b240e90642bc577eb49875a4268facd03721122ad588eb34e7614fd06a569371c"], 0x1}}, 0x0) [ 1635.674172][T26265] 9pnet: Insufficient options for proto=fd 17:25:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x8, 0x8, 0x4, 0x10000, 0x1, 0x2, 0x5, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x6, 0x10, 0x8, 0x5}, &(0x7f0000000200)=0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="481cc5a180c7b68f1c2d45509316dcbb0cdbeb5d647dc048d1", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1635.739519][T26157] loop5: p1 p2 p3 p4 < > 17:25:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:25:47 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea00000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:47 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 1635.880925][T26272] 9pnet: Insufficient options for proto=fd 17:25:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x1, "99ec2c479ca6af5c6d20dc36b24746b894191190ca8a5913e8f4e874f5fb12aa", 0x1, 0x1}) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(r1, 0x0, 0x0) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x0, 0x38e1438b, 0x3ff, 0x1f130000000}, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000b0f65fb9a6c4e2820000002b5c40d6ae4d852f023553600df0e07ad64388fb20c9ddc3bac11fa82a041a4623c95a37e4a24acebe5f814100b249129889089cf5ac02ca9f4a2bf18a80c348f0d8114a5d23d896c357414873036e84bcb5ed66ff3be32d0cf5284b54e3c9ede883f22ac5af1a6bf00e0aa1c1997602da16f67b08"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:47 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 1635.990408][T26277] 9pnet: Insufficient options for proto=fd [ 1636.023539][T26275] loop5: p1 p2 p3 p4 < > 17:25:47 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 1636.138079][T26282] 9pnet: Insufficient options for proto=fd 17:25:47 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:25:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c3b2543f", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1636.225322][T26286] 9pnet: Insufficient options for proto=fd [ 1636.300322][T26275] loop5: p1 p2 p3 p4 < > 17:25:48 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea10000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 1636.340813][T26291] 9pnet: Insufficient options for proto=fd [ 1636.474889][T26294] 9pnet: Insufficient options for proto=fd [ 1636.501500][T26296] loop5: p1 p2 p3 p4 < > 17:25:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f12bc123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e26, @rand_addr=0x3}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x84c0) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1adbbc5024"], 0x1}}, 0x0) 17:25:48 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x3, 0x100) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x4, 0x101, 0x101, 0x1, 0x5, 0x7ff, 0x2}) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400002}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0xb3e, {0x401, 0xfffffffffffffff8, 0x8, 0x7, 0x100000001, 0x76}, 0x800, 0x1}, 0xe) r4 = request_key(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000680)='/dev/dmmidi#\x00', 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000006c0)='dns_resolver\x00', &(0x7f0000000700)=@builtin='builtin_trusted\x00') getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=0x0], &(0x7f0000000300)=0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, {0x1ff, 0x0, 0x2, 0x800000000, 0x8, 0x2}}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000780)={r5, 0x16, 0x2, 0x401, 0x3f, 0x4}, 0x14) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14bb3c650d76bdd833a9173408000d00"/27, @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) keyctl$invalidate(0x15, r4) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fsetxattr$security_evm(r1, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="feae07e6a840cd130f028421dae128d8b5fefd275c2227cc4775b8031ca7c8ae2feb4b49d888a1f3b624622233bed031f213c474e6709a291e326150d759a96b0bed9a32bc6e1c5e0b27d8335b69208e64ccee544d4796b3e4"], 0x2, 0x3) 17:25:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 1636.662360][T26296] loop5: p1 p2 p3 p4 < > [ 1636.720455][T26401] 9pnet: Insufficient options for proto=fd 17:25:48 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea20000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:48 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 17:25:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f0000000000)) io_setup(0x0, &(0x7f0000000080)=0x0) io_destroy(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x8403, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000042c9570c59ed82c600388978992483e6a87c40abb5fa832bfb55fe77ea1ba58ccb0cd19ea36004dbc5febbfbdf2cc97f8a03a124df59ce075aac61e6f8db00a52efe168f03be72d4dcec48c34f67e0f1eec309cd4896d3cc1fd6132bbad958f0a0f3a4a7ae5108", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 17:25:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1636.879308][T26406] 9pnet: Insufficient options for proto=fd [ 1636.928436][T26409] loop5: p1 p2 p3 p4 < > 17:25:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1636.955187][T26413] 9pnet: Insufficient options for proto=fd 17:25:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1637.024293][T26415] 9pnet: Insufficient options for proto=fd 17:25:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) dup3(r1, r2, 0x0) [ 1637.090010][T26409] loop5: p1 p2 p3 p4 < > [ 1637.101866][T26418] 9pnet: Insufficient options for proto=fd 17:25:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:48 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea30000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1637.245901][T26423] 9pnet: Insufficient options for proto=fd [ 1637.308550][T26425] loop5: p1 p2 p3 p4 < > [ 1637.438526][T26425] loop5: p1 p2 p3 p4 < > 17:25:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10000, 0x0) r3 = dup2(r1, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000100)={'veth1_to_bridge\x00', {0x2, 0x4e20, @remote}}) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050100000000000000000101000000000011018000010014001462726f0900000053742d6c696e6b00003db481fad94fd02ba4ed5c7ee54c3f00e7708c8032a0c62b9376337b5f3e72aa26da19ccb700ea7774e5cf46d6a55a15aa57d454a563609e2cc0add44fe17fbf48d84605ed96643c3fa64f4e64f7d24a5d28df96e4244393e9e9e8a9b0f06aa4c8c61df4ea498202e7e5026504a57b9c24d17f9e2c690f67212dffcb7e41f2a43e99b61aa54829f670ccf2a6cdfa76c0ed44acd929ac9858a9b1dd6a7288657bf7751e27587dc2f9ac1755b923a55a70ba47bc5fcaddb9da3629aedefa9970c036521f"], 0x30}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x1ff, 0x2, 0x0, 0x2]}, 0xc) 17:25:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0xfffffffffffffffb, 0x0) io_setup(0xb24, &(0x7f0000000140)=0x0) io_destroy(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000f808bc3b820004c862bce6c1f6d13749c25de3ed6e9a4242c51db33853836dfedc452f89c5003123fc5cc535f31df64520bb8b1ebb2b55496bc1221a65c0092908000000bc34176a8653aa38b87847de5a575dae2d1f3c652af28a7cc1f068366c26f0eafb3efc9608ef3afcf58399c1958db4ec7ba37eb3c689902b"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 17:25:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:49 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea40000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1637.668586][T26531] 9pnet: Insufficient options for proto=fd [ 1637.688700][T26533] loop5: p1 p2 p3 p4 < > [ 1637.828565][T26533] loop5: p1 p2 p3 p4 < > 17:25:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1637.859318][T26561] 9pnet: Insufficient options for proto=fd 17:25:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r2, &(0x7f00000000c0)={{r3, r4/1000+30000}, 0x17, 0x100000001, 0x9}, 0x18) 17:25:49 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea50000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:49 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x0, 0x42000) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000200)={0x2, 0x1, [0x7, 0x7ff, 0xea, 0xfffffffffffff800, 0xe2, 0x371, 0x8001, 0x80000000]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10d43, 0x0) userfaultfd(0x80000) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1637.993124][T26641] 9pnet: Insufficient options for proto=fd 17:25:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1638.089473][T26646] loop5: p1 p2 p3 p4 < > 17:25:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffda7, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14400000", @ANYRES16=0x0, @ANYBLOB="000025bd700000000000040000000000010000000000000000000000000000000001000006000000000000000400"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x200, 0x7fffffff}, 0x0, 0x0, &(0x7f0000000100)={0xbd, 0x4, 0x637, 0xfffffffffffffffd}, &(0x7f0000000180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x20}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r3, 0x4) [ 1638.179469][T26723] 9pnet: Insufficient options for proto=fd [ 1638.193044][T26646] loop5: p1 p2 p3 p4 < > 17:25:49 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea60000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x1f3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1638.334130][T26764] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x7fff}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@flushsa={0x58, 0x1c, 0x0, 0x70bd26, 0x25dfdbff, {0xff}, [@srcaddr={0x14, 0xd, @in=@multicast2}, @lifetime_val={0x24, 0x9, {0x81, 0x262, 0x4, 0xfffffffffffffffe}}, @lastused={0xc, 0xf, 0x100}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) [ 1638.419306][T26811] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1638.474510][T26872] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="810000000000000000000400000083cc9a3b5d3292e18315c9c45bb0d05e12b4d7bc52daabb5ff576c3d8343f31aba0ffe21ebd94d463091b3583e739722f62d753a4e160368af7ee1ff9254418a2092ea8bd8ce9b5c208de878f21fd43720bacd9664fae8aa0ea209ffdf462c339cf192cd6d15c189d3512232fbf44c1673a8cd58aa8b27"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1638.549753][T26877] 9pnet: Insufficient options for proto=fd [ 1638.564440][T26811] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:50 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea70000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="a6bd4bccce9ae6d79d8f3e064d5018d1e62b8f939fbc5a771d8a3ca722407a5026365c059bc87325824ef09d4a1a9b5623075a61cca37f55e87499bbb58f93f6c044152d1105ee267b8a435d802cff7916901067158ab76642f51d59a6162d9ff6422bc33339bdcf5b34c75bf2d236003a0b7f01da2d75a481ddf3f8d34f332a63022a43e83717f51e2343fecbf50f8669"], 0x1}}, 0x0) 17:25:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x13, 0x1000, &(0x7f0000000440)="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"}) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) [ 1638.743605][T26977] 9pnet: Insufficient options for proto=fd [ 1638.788976][T26985] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000002c0)={0x7f}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1102100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x2, 0xffff, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000280)) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1638.874169][T26992] 9pnet: Insufficient options for proto=fd [ 1638.918457][T26985] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea80000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1638.972306][T26997] 9pnet: Insufficient options for proto=fd 17:25:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x4, 0x6}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x200}, 0x8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x7f) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1639.049668][T27001] 9pnet: Insufficient options for proto=fd [ 1639.113222][T27004] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x6000000, &(0x7f0000000080)) io_setup(0xfffffffffffffffc, &(0x7f0000000140)=0x0) io_destroy(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x40) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000080000000004000000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1639.245024][T27010] 9pnet: Insufficient options for proto=fd [ 1639.251669][T27004] loop5: p1 p2 p3 p4 < > 17:25:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ea90000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1639.411426][T27014] 9pnet: Insufficient options for proto=fd [ 1639.523892][T27016] loop5: p1 p2 p3 p4 < > [ 1639.668625][T27016] loop5: p1 p2 p3 p4 < > 17:25:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x800) socket$inet(0x2, 0x5, 0xae) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, @default, @rose={'rose', 0x0}, 0x32, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3ff, 0x8, [@default, @default, @default, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) write$rfkill(r2, &(0x7f0000000180)={0x7, 0x6, 0x0, 0x1, 0x1}, 0x8) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c85003abf75fe9cd46148890e0a50ed7549fa471e"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x7ff, 0x4, 0x1f, 0x4, 0x9, 0x6, 0x7, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e21, @remote}}, [0x81, 0x7, 0x100000001, 0x0, 0x2a, 0x0, 0xf4758a6, 0x2, 0xd57, 0x7ff, 0x8, 0x0, 0xddb2, 0x741]}, &(0x7f00000003c0)=0x100) 17:25:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000072646a07275e96e00"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eaa0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x0, 0x3ff, 0x1, 0x7, 0x0, 0x2}}, 0x8) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1639.771952][T27122] 9pnet: Insufficient options for proto=fd 17:25:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000140)=0x8) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0x5}, 0x2) prctl$PR_SET_TSC(0x1a, 0x1) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 1639.909659][T27163] loop5: p1 p2 p3 p4 < > 17:25:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0xa, 0xfffffffffffffffe) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xffffffffffff265c, 0x80000) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f00000000c0)) finit_module(r1, &(0x7f0000000280)='vxcan1\x00', 0x2) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r3, 0x0, 0x91, &(0x7f0000000180)='}3trusted{\x00', 0xffffffffffffffff}, 0x30) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000240)={r3, r3, 0x7ff}) [ 1640.073591][T27163] loop5: p1 p2 p3 p4 < > 17:25:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000200)) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, 0x1, {0x0, 0x3}}, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x10000, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x5) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1}}, 0xfffffffffffffffc) 17:25:51 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eab0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x7ffa, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fff, 0x440000) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000ff0f31bd0000"], 0x14}}, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1640.308064][T27279] 9pnet: Insufficient options for proto=fd 17:25:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x20040, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vxcaf1\x89\x00', 0xf0) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) [ 1640.349416][T27334] loop5: p1 p2 p3 p4 < > 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0xb23) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1640.488069][T27367] 9pnet: Insufficient options for proto=fd [ 1640.498878][T27334] loop5: p1 p2 p3 p4 < > 17:25:52 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eac0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x0, 0x3, 0x83, 0x9, 0x4}, 0x56, "e4794f8640df1b27c440503e0346ae915d0b3634dca589f9354eee5451dc5392864d2495c35a666f7fe720285feed2e4b29e1ac25a370a003711f7f3a2c1ebfe8a9fc28972c605d5354553f6a8f7bb43cb06701b8589"}, 0x68) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000300", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0adc1f12fa123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x4, r3, 0x0, 0x1}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r5 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e309000000ed869170a7951aefc12251154c471a3a4b20afa882e573c6259e311da598f3bef219e66646d15fc763daaeeda328c404535c0f1d1cfbd1c5ee1a468ec0362f255d1efa0c1046967e6cb26701bf28f8caf8ed78b1f483dfe98d2975e1a36c671482caa19b6e312035fa84746cb74dff35"], 0x1}}, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r5, &(0x7f0000001700)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000440)={0x1278, 0x1, 0x7, 0x300, 0x70bd25, 0x25dfdbfb, {0x3, 0x0, 0x5}, [@typed={0x8, 0x1d, @uid=r6}, @generic="cd134d6038ff2d277a1393bd886bb194ee4be8e8aa6ef86276c5fd222e43ebb0ef1bf0cedf85b039056fe52e8642fa1025318f03ebeec51b439eb021f2a8459c2c36e88f81e4f527bb09dfa21ce8fd8e2f7f626fd72e3a3bb036fd3d688b694ae4912b85e67d8da49f5feb0e16a92f5b5218b1eb9ede997c9b9168a798a43138a0c20ebc46120c461d0352f43a121ccf232e2862ca33f595b9fd027e421450c1b46915b1407a0f7e026cbedc5ad6981cde45e8fe6bb5021dc3565e8bc27f20d1471e91f3b4f42a7784427d853e48", @nested={0xbc, 0x87, [@typed={0x8, 0x27, @fd=r4}, @generic="21d30ad6a8a4de360bc92eda8a72be57a53b6792ee947a5aff70f7b12ec2e4142cf48d356dcf520ffa0fb103cf25e0ecb3b8eaba28d8782cd4e504973003e5b919111e48e395f4698ae10cc189c19d78ca1f6bb6b78d4d07e92b6bbf4f391b13223a3daa7ac28e1676bd61316c03ed", @typed={0xc, 0x47, @str='bdev\x00'}, @typed={0x8, 0x24, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cfb2956540a2e8961d9e06e0", @typed={0x14, 0x56, @ipv6=@ipv4={[], [], @broadcast}}, @typed={0xc, 0x33, @u64=0x8}]}, @nested={0x10d0, 0x28, [@typed={0x1004, 0x13, @binary="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"}, @typed={0x8, 0x88, @fd=r4}, @generic="33b74b8526bb8dca419c040aacd4f475a2effa3f8f8a3c3ad3a52dc95e0e388d782af7009e8531b297300935e455c397164f45f735c0093a0c7404673ad999a9b1e2efac10e1f04ecfe643c669d69cd9ecf7496d8c9e01a2c2af6373b94c8d48c7cd8fbc8e680ee851ef4b2ff6badf1b1423aac58d946df635d6e88b45ac635aeb76127fd5845f5faaddb895c968ee584d44cfb35031c72bce2a97136ab976563fdf9c0c685db8e54d29", @typed={0xc, 0x6d, @u64=0xb89}, @typed={0x8, 0x82, @uid=r7}]}]}, 0x1278}, 0x1, 0x0, 0x0, 0x4001}, 0x80) [ 1640.683435][T27476] 9pnet: Insufficient options for proto=fd [ 1640.690253][T27464] loop5: p1 p2 p3 p4 < > 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @loopback, 0x96}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x39, 0x0, 0x1000, 0x0, 0x262d, 0x7, 0x1ff, 0x3, 0x8001, 0x4, 0xfffffffffffffff8, 0x9, 0x0, 0x8, 0x5, 0x4, 0x400, 0x101, 0x1f}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000440)={0xffff, {{0xa, 0x4e24, 0xfffffffffffffa08, @empty, 0x80000001}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x3, @ipv4={[], [], @remote}, 0xd}}, {{0xa, 0x4e21, 0x0, @rand_addr="3f54d94c09b0fe5afb28c37647656231", 0x5}}, {{0xa, 0x4e23, 0x5, @loopback, 0xffffffff}}, {{0xa, 0x4e24, 0x0, @remote, 0x81}}, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10001}}]}, 0x310) 17:25:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000000c0)) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="58813406915570f5ef66b53e642be2ec9a064756b969f5cedeaf705b31a20aa58aad653370df9e7bf188196e2b10de6ed5e8dea6e5859fbc45eabeda72aff3196b24537dd2a97036001f8addd87e7b9c7af8471d1f95f9d72c261f0a5230ac292d6683edc66f240aba6ad97306cc99958d5f24f20b2115734d1686b3f133163fe6dc63aaaa38302bcb7379130c60e0a66819f0e00e5ac277fc50a12a4b91e22a3f15014634f729819dc98383280aa0af5f18057bb4756db61fbc2cd4f45899ab02645d3518fc92c71fcca45f11112438a2322f0ed845", 0xd6, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r3, 0x10001) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000380), &(0x7f00000003c0)=0xfe) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="98fe5db0f9c5bd5cb2c4cda5e6dee3e6b2df529514ac1fd6a96034b911310284cf1133b1899b6468c5c4149705764262c6c5c5b3ebcff5aad6a4a403ee5f779675064833bed5dd7c9c9e0cd5f7f40f15e6f3e424b004e2dc5a590e79912f1002457514beb91621ec"], 0x1}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) inotify_init1(0x80000) 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 1640.880072][T27464] loop5: p1 p2 p3 p4 < > 17:25:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:52 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010ead0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f00000002c0)={@multicast1, @loopback, @rand_addr=0xffff}, 0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000300)=@srh={0x0, 0xa, 0x4, 0x5, 0x2b, 0x20, 0x7, [@loopback, @remote, @local, @mcast1, @remote]}, 0x58) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="8e13e3157e2f526d583c22c1d8ed86cde1d34964e6f0f98ef992a43379f396f11bd249201f124d05e236d2525608d0e0ddd820a6416cd4eabec7fb6d505c25a656be32740ba603680d03905524270a58e36d469e92101bd1d4c55e234f960e6a8af6fabddfa3d8adf7ebd636af328887ad7ff04984ed691324a321010ed6c7507a1fea73"], 0x1}}, 0x0) 17:25:52 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eae0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:52 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eaf0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0xffffffffffffffc3, "71e19cb66b6472ff96ac67229da80d19652d3c21dea6b80c313cf54335aa44b8", 0x0, 0x882, 0x0, 0x7ff, 0x2, 0x0, 0x80000000, 0xaac5}) r3 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4043, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000002b00000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb00000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000440)="a97b83b144da4faae0a459a2a3e4108f859cd8e9c11c522a38eb0217e4d033be026b434e9d7f06e6af716e7755b6e8c41a8b0ee227184a4d7dd962c87c1ea074f97bc409f56dc6c715a02369767def44f7c99c0802903b7019af8c7f4c80892d404b4d1221c93b41a46db89bdaaefb39b30f31046cbc948290dcacb83e0321e5b2abcba2f278e1d6f8b482b04766f0c30d5ebe8cf491b4370b3fedae06bf2b86109742f5de7cade1429c6761797e44c52fe25227f0a6182a5c9f76b75d90a98e65938df3f08a36d9559b5d9286ad2314373303e971f81b242c5b3430e61a63fca5835067b833b123", 0xe8}], 0x1, 0x0, 0x0, 0x8000}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0)="592932f32156fa239975d6b56b38e7f25b806038495434c7b6365f0c770c24cf0884dbf263c518aece06c5c1e03de9239c93593952bdd80ded627b95c8635a1d695e163f15e9102d91bafd84fdcc60358f047ae2ca7e249fe285cf18d5a8a4ba3600dec0a61fff9673f932100b4bb905e29ab7fc0d25db84721a9fb1ba0cc67987d9238766cadd6315eb911973f05e889d1b07090bc302788188208ce84dbff115d8da4d56981d6856bb58b99e440698720680c3e5bf70a73ecd9b8921f9d452f02715dd30914953d82a975519dbcf2ffb8e472b79747e593815e06b68e2fb737939141b", 0xe4, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000540)=""/210) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000122f", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000796fac8760ff93a289d41213cca9ebe7df570c2907d64ffbfdf46178c3632f7710bba1c27a5a3b6d9fe3ba177694e68003a26ca0ae3ff68633c25acf71ff98cb487f4f601bca43766418f1f98145f334bff918bd240336d4d6deaa6d2283ac6107bc480ee71cb7f99caaedd88538198b2dfd4e15ddf8e72d6a550bc9f543812b6edf52eddddb7300"/159]}, 0x1, 0x0, 0x0, 0x7fc13cb1967f7360}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:25:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb10000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80, 0x200000) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f00000000c0)={0x2, 0x1f}, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:25:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb20000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 17:25:53 executing program 2 (fault-call:9 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb30000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, 0x0) 17:25:53 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb40000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 1642.264254][T27742] FAULT_INJECTION: forcing a failure. [ 1642.264254][T27742] name failslab, interval 1, probability 0, space 0, times 0 [ 1642.294224][T27742] CPU: 0 PID: 27742 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1642.302252][T27742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1642.312331][T27742] Call Trace: [ 1642.315655][T27742] dump_stack+0x172/0x1f0 [ 1642.320010][T27742] should_fail.cold+0xa/0x15 [ 1642.324637][T27742] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1642.329148][T27747] 9pnet: Insufficient options for proto=fd [ 1642.330562][T27742] ? ___might_sleep+0x163/0x280 [ 1642.330599][T27742] __should_failslab+0x121/0x190 [ 1642.346385][T27742] should_failslab+0x9/0x14 [ 1642.350905][T27742] kmem_cache_alloc_trace+0x2d1/0x760 [ 1642.356376][T27742] loop_add+0x51/0x8d0 [ 1642.360481][T27742] ? idr_find+0x47/0x60 [ 1642.364654][T27742] loop_control_ioctl+0x165/0x360 [ 1642.369695][T27742] ? loop_add+0x8d0/0x8d0 [ 1642.374118][T27742] ? loop_add+0x8d0/0x8d0 [ 1642.378449][T27742] do_vfs_ioctl+0xd6e/0x1390 [ 1642.383066][T27742] ? ioctl_preallocate+0x210/0x210 [ 1642.388269][T27742] ? smack_file_ioctl+0x196/0x310 [ 1642.393296][T27742] ? smack_inode_rename+0x2d0/0x2d0 [ 1642.398604][T27742] ? tomoyo_file_ioctl+0x23/0x30 [ 1642.403570][T27742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1642.409827][T27742] ? security_file_ioctl+0x93/0xc0 [ 1642.414947][T27742] ksys_ioctl+0xab/0xd0 [ 1642.419116][T27742] __x64_sys_ioctl+0x73/0xb0 [ 1642.423810][T27742] do_syscall_64+0x103/0x610 [ 1642.428411][T27742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1642.434316][T27742] RIP: 0033:0x458c29 [ 1642.438244][T27742] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:25:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:25:54 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb50000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1642.457961][T27742] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1642.466387][T27742] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1642.474368][T27742] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1642.482349][T27742] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1642.490334][T27742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1642.498428][T27742] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:54 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000001b60000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1642.567686][T27751] 9pnet: Insufficient options for proto=fd 17:25:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) pipe(&(0x7f0000000180)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r3}) 17:25:54 executing program 2 (fault-call:9 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 17:25:54 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb60000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1643.062154][T27856] 9pnet: Insufficient options for proto=fd [ 1643.090088][T27859] FAULT_INJECTION: forcing a failure. [ 1643.090088][T27859] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.137523][T27859] CPU: 0 PID: 27859 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1643.145561][T27859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.155639][T27859] Call Trace: [ 1643.158961][T27859] dump_stack+0x172/0x1f0 [ 1643.163315][T27859] should_fail.cold+0xa/0x15 [ 1643.168052][T27859] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1643.173885][T27859] ? ___might_sleep+0x163/0x280 [ 1643.178754][T27859] __should_failslab+0x121/0x190 [ 1643.183877][T27859] should_failslab+0x9/0x14 [ 1643.188489][T27859] kmem_cache_alloc_node_trace+0x270/0x720 [ 1643.194503][T27859] __kmalloc_node+0x3d/0x70 [ 1643.199022][T27859] blk_mq_alloc_tag_set+0x346/0xd40 [ 1643.204343][T27859] loop_add+0x286/0x8d0 [ 1643.208510][T27859] ? idr_find+0x47/0x60 [ 1643.212680][T27859] loop_control_ioctl+0x165/0x360 [ 1643.217714][T27859] ? loop_add+0x8d0/0x8d0 [ 1643.222144][T27859] ? loop_add+0x8d0/0x8d0 [ 1643.226484][T27859] do_vfs_ioctl+0xd6e/0x1390 [ 1643.231092][T27859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1643.236578][T27859] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1643.241876][T27859] ? ioctl_preallocate+0x210/0x210 [ 1643.247003][T27859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1643.252497][T27859] ? retint_kernel+0x2d/0x2d [ 1643.257116][T27859] ksys_ioctl+0xab/0xd0 [ 1643.261288][T27859] __x64_sys_ioctl+0x73/0xb0 [ 1643.265893][T27859] do_syscall_64+0x103/0x610 [ 1643.270506][T27859] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1643.276433][T27859] RIP: 0033:0x458c29 [ 1643.280339][T27859] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1643.300140][T27859] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.308570][T27859] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1643.316733][T27859] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1643.324739][T27859] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:25:54 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb70000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfd03) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 1643.332725][T27859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1643.340705][T27859] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:55 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0xa8400, 0x0) r2 = timerfd_create(0x1, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001540)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000001640)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002a80)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000002b80)=0xe8) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002fc0)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, &(0x7f0000002f40)=[{&(0x7f0000000240)={0x12e0, 0x42, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x3, @fd=r1}, @generic="00a34ade26e738d3b0fe6ce3718cbf92edb90e87415e9831caac8dca55cade7b821b4104ed362c59c7f9174a8f31", @typed={0x8, 0xc, @fd=r2}, @generic="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", @nested={0x290, 0x77, [@generic="f8210e82a857cac40cc045bc2f8e09a4e36da9fb9303877e75689192a3bb9f43338467e18c9dcde99e833aa17fbd4185cb3ffa3bdab63553130df24636fb4e97a7e8acd31bafbc2ace4751bb244b160e8f8f1cfd506c2629b2df7e6e79189a3766b3b171f4bdad5a56277110b068014ba2f76f8484a63f9d8970a890a80a9673aae36da43b2842201a42a8d1d102427499d85c5500c60c14750e9476962b21dfc1e07587c00334fd44115e818cd94e7d6310d84d", @generic="ffde00786321e410c0f5116ad63a6779ee07cf23d75826bcb5c6505d4de67365189527ab791c41631c771c05b2c4bb47c8889d60c44259236a05447d7030d2228767231a172aa573a5e8932ae5e30c144cb06b87dc9c56814af3ccb680897fedd450f8c0f739b0aee8496ff674d5b781405ce80b803aa6ec1d2e0d3332c5c5f5d9bfb0f7ef73d29c3ead22", @generic="60e071a93df8aac7353eb380c1416fa3f774557c219eaa906147fea319954b6946d33ab0a20bf435a1215981a465915d10fbce8dea8b558b280c154b40f83762a3f7530aa17570f9d0b26b7f65662d7a629c57305ce5e91118b342999eba4c0feae8f104c1df5d195e6b4c0d39a444b9a43e201c7062c3090240edeb5a004c18b343830a37cc5eb4a99a4e71711abbfbe91ee5933568a97c5b97780d792dbc983383bc8386dd50e417687e202fd5d4280fb217e09799da82a0388dc20a2b2c865c18b853ff9975801d305a5d334c343800298785d9beafdc28c7f2436bccc705eb304478e21b70ef934e6e10a5b5df37bdf7f115", @generic="aef78955543e41682f3b0a34cc2a1fc16531fe0e4c19cec73325f46a9b04f0c65eeaea36d48f43eac76ebb8116c2decd399a062b6b4c15284ff1c449a24234aeafd5e454dde985f22f2af99952c88b0a13cdadd755467bd3"]}]}, 0x12e0}, {&(0x7f0000001680)={0x12c8, 0x32, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0x7, @ipv6=@empty}, @generic="5976b396d1ffbfaa980266ff95478e80122b0a4de2e55bdf84f35750cdf4b3c875694a1d4432df1555e33d0939283b07", @generic="cf31516acf2e82a447f8cb17fd737c05f6295f95b796d75c0df7283f1925b4d11e9c9e9b57a3ee125cf7b8cb63ba5991de256cc70a879cb1ef3057a8b117d699dd8e42a1b8b23a6b04c66c245c37b252b0c58b15577a9b7f85808f751844b2d1618f99d1ae723a51c37258e6414a66d9d7e6a176ffb1d34871a5d623e18c1de034dd038a0fcd69b4420b79d7ba177de882509a61c1ebe0d1312132aec26e559cf21362101c4bb82403b94a4ab7feddaf0b5bfaca816f34cd099f485aa7af", @nested={0x4, 0x3f}, @generic="2da86b7c26c95c660105518c70c43ddc7765fa970d1776655008a9fd358d7fd2e30b3b38209922de924227ebab5a6e6a23c1461bb59caa980c90b88095", @nested={0x1174, 0x69, [@typed={0x4, 0x65}, @generic="036204da703a157c29678b022227f5bf09f79ee870563296662e84291764f4e0509787820571ba978366bf522d726e11eb08705d51e5bd28874c4975414e1ad1d0f460e97f8a4e96661828509be5eb5e24", @typed={0xc, 0x28, @u64=0x3c}, @generic="eeab37b2fcd0f67e95d3bdb4e5d27849d05114b89af9bbee9447", @generic="5692f55041f8a8d7c2467533077066def14652a4784b86c259cfe3690b1c30dbbe5774c891b4942838a5a43821059acce1cf785f7f624a34d2a2cc6b0b664272a79116718f50f616d61206728a273bdfecea01fb588033a29688550bddf7d9e81075df9db180da1ef60c5756168f09ae7609c8e31aeac745eb35bdad18594078a2d21f6b166f142c0666ceea04ecca68ba51c20d9cdcd73aabc4b8e79d2e2d75d7a465d623dcc7a7ff8a19f6f992628139132faddc66427bf4c0be6df9feeb429f6255d79fe0f52cb6f39f4a", @typed={0xc, 0x8d, @u64}, @typed={0x8, 0x2b, @uid=r3}, @generic="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", @typed={0x14, 0x73, @ipv6=@dev={0xfe, 0x80, [], 0xa}}]}]}, 0x12c8}, {&(0x7f0000002980)={0x10, 0x3a, 0xd04, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f00000029c0)={0x98, 0x20, 0xe00, 0x70bd28, 0x25dfdbfb, "", [@typed={0x14, 0x39, @ipv6=@rand_addr="771f9cc8808aea05affe97b56f8d66b8"}, @generic="5d181445d007157eacb9897deac1b5404e57720b4e07848c0e154d53d1bf6cb07ef3519e9ebeab6230661aafd1dd40d51cc7898afc4557275eb1ac274ad932035781d271430770d2e8bef229d4ebbeb99c8e2d932415c98f8b35c8223eb03982fd89bbce6c45ab557f06", @typed={0x8, 0x1, @ipv4=@local}]}, 0x98}, {&(0x7f0000002bc0)={0x208, 0x3d, 0x10c, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0x47, @ipv6=@loopback}, @generic="743910bfc738546dab10300868886d6b59cc7eb41e9be2040a20abda06b3ed9fd167cdbf903b437e1f8f899dbc93e23777933d2e", @nested={0x98, 0x37, [@typed={0x8, 0x59, @uid=r4}, @typed={0x4, 0x7e}, @generic="ae5fe12d4796b4cdd8b82081e816b9e759cc2727596ab495f71d3bd597d7ff4d5a6721cc705387cc2297a6d54d6282d9f10563a1e97340deb2d82b1dcda33070902ef5d16b6f3e0c99b8e69cc56f792f06147659094cf34295c1086e3ab7a9c9d51794b0a77c1bcaa3464ac08436e78883b197999361a76d610bb33bb7d13d68b2daa83459d6"]}, @generic="4ce76bbf8612363033ca1e513b2a5f933611d66fe8d77ac1ba43f3f23c75a44be6181e6e9405c0bb8ec348abcd7c9ed7297fa784b64458d912dd7c42da3aea17455e9a914cba66034327d03fb6ee0f4fb775bcb7138cdd802fabf445bb8becbb6b2f13ffba7d6e38778463ca54d2f3d35a75f1fde5e8aca3ed983473423aeb76d578a07f67d723049e494891", @generic="f8c30e409995146fe5990a9ad7b38ed54cde9e922a5c2725bce7636a2c58bf3b0fba9141074915e4a8919fa4190810085f3dc330cdcb3ae6e01d94ad62ddda9b25aefeb6a3daee25e88f91611abe8c419908cc5776be44b8de236a656f132c9abef5e5e87e309918ef9d616876d437c335eb95af810ef99b195e02f30e8cd929ab5ebe2a732f59faf5235c9e"]}, 0x208}, {&(0x7f0000002ec0)={0x6c, 0x37, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="8918ee193f197c46d407078c5faf464d2ff36de0c37ec4e6f6c408a27371f936c2aec2a815559e6ff5340d50e7b7bfaf96a5bf60f57cefdb370eeb1a48a78dcb53c23d4ca0d9290f99c7", @typed={0x8, 0x3b, @uid=r5}, @typed={0x8, 0x5d, @ipv4=@empty}]}, 0x6c}], 0x6, 0x0, 0x0, 0x40804}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r8 = dup2(r7, r7) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb80000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:55 executing program 2 (fault-call:9 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00010eb90000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2849bda1d170313751e917aab254462fe7cd5cc248f210b7eacbce54845fd5dd644b020c9e2000efdab8f7e04e3165cb334b8590c5afb9aa4b3bb6b2ea9c60096253b1c73abb4ba26c375e7aae347f89c90f3081624d9973e191fa839aec5e5f0f6b7c2e0b4bf92cf53b6d0000000000"], 0x1}}, 0x0) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ffffffc90000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000003d40000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000003e40000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ffffffe40000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1643.678865][T27978] FAULT_INJECTION: forcing a failure. [ 1643.678865][T27978] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.734838][T27978] CPU: 1 PID: 27978 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1643.742871][T27978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1643.752945][T27978] Call Trace: [ 1643.756276][T27978] dump_stack+0x172/0x1f0 [ 1643.760626][T27978] should_fail.cold+0xa/0x15 [ 1643.765234][T27978] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1643.771062][T27978] ? ___might_sleep+0x163/0x280 [ 1643.776104][T27978] __should_failslab+0x121/0x190 [ 1643.781063][T27978] should_failslab+0x9/0x14 [ 1643.785602][T27978] kmem_cache_alloc_node_trace+0x270/0x720 [ 1643.791418][T27978] ? kasan_unpoison_shadow+0x35/0x50 [ 1643.796712][T27978] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1643.802555][T27978] __kmalloc_node+0x3d/0x70 [ 1643.807079][T27978] blk_mq_alloc_tag_set+0x492/0xd40 [ 1643.812300][T27978] loop_add+0x286/0x8d0 [ 1643.816459][T27978] ? idr_find+0x47/0x60 [ 1643.820629][T27978] loop_control_ioctl+0x165/0x360 [ 1643.825659][T27978] ? loop_add+0x8d0/0x8d0 [ 1643.829994][T27978] ? do_vfs_ioctl+0xca/0x1390 [ 1643.834698][T27978] ? __sanitizer_cov_trace_pc+0x50/0x50 [ 1643.840253][T27978] ? loop_add+0x8d0/0x8d0 [ 1643.844616][T27978] do_vfs_ioctl+0xd6e/0x1390 [ 1643.849320][T27978] ? ioctl_preallocate+0x210/0x210 [ 1643.854437][T27978] ? smack_file_ioctl+0x196/0x310 [ 1643.859468][T27978] ? smack_inode_rename+0x2d0/0x2d0 [ 1643.864690][T27978] ? tomoyo_file_ioctl+0x23/0x30 [ 1643.869637][T27978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1643.875904][T27978] ? security_file_ioctl+0x93/0xc0 [ 1643.881041][T27978] ksys_ioctl+0xab/0xd0 [ 1643.885212][T27978] __x64_sys_ioctl+0x73/0xb0 [ 1643.889823][T27978] ? do_syscall_64+0x5b/0x610 [ 1643.894530][T27978] do_syscall_64+0x103/0x610 [ 1643.899145][T27978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1643.905057][T27978] RIP: 0033:0x458c29 [ 1643.919051][T27978] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1643.938671][T27978] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1643.947813][T27978] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1643.955797][T27978] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1643.964589][T27978] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1643.972659][T27978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1643.980639][T27978] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:55 executing program 2 (fault-call:9 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:55 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ffffffeb0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1644.096193][T27989] FAULT_INJECTION: forcing a failure. [ 1644.096193][T27989] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.120479][T27989] CPU: 1 PID: 27989 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1644.128519][T27989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.138592][T27989] Call Trace: [ 1644.141906][T27989] dump_stack+0x172/0x1f0 [ 1644.146256][T27989] should_fail.cold+0xa/0x15 [ 1644.150869][T27989] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1644.156694][T27989] ? ___might_sleep+0x163/0x280 [ 1644.161923][T27989] __should_failslab+0x121/0x190 [ 1644.166868][T27989] should_failslab+0x9/0x14 [ 1644.171379][T27989] kmem_cache_alloc_node_trace+0x270/0x720 [ 1644.177195][T27989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1644.183556][T27989] ? find_next_bit+0x107/0x130 [ 1644.188342][T27989] blk_mq_init_tags+0x73/0x2c0 [ 1644.193122][T27989] blk_mq_alloc_rq_map+0x88/0x200 [ 1644.198163][T27989] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1644.203387][T27989] ? kasan_kmalloc+0x9/0x10 [ 1644.208104][T27989] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1644.213322][T27989] loop_add+0x286/0x8d0 [ 1644.217483][T27989] ? idr_find+0x47/0x60 [ 1644.221652][T27989] loop_control_ioctl+0x165/0x360 [ 1644.226682][T27989] ? loop_add+0x8d0/0x8d0 [ 1644.231109][T27989] ? loop_add+0x8d0/0x8d0 [ 1644.235630][T27989] do_vfs_ioctl+0xd6e/0x1390 [ 1644.240851][T27989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.246323][T27989] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1644.251624][T27989] ? ioctl_preallocate+0x210/0x210 [ 1644.256755][T27989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.262319][T27989] ? retint_kernel+0x2d/0x2d [ 1644.266940][T27989] ksys_ioctl+0xab/0xd0 [ 1644.271109][T27989] __x64_sys_ioctl+0x73/0xb0 [ 1644.275711][T27989] do_syscall_64+0x103/0x610 [ 1644.280312][T27989] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1644.286205][T27989] RIP: 0033:0x458c29 [ 1644.290114][T27989] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1644.309823][T27989] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.318339][T27989] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1644.326323][T27989] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1644.334309][T27989] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffff50000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1644.342294][T27989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1644.350377][T27989] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 [ 1644.398966][T27989] blk-mq: reduced tag depth (128 -> 64) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffff60000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/mnt\x00') ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc8, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x23}, 0x13f6}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8ca}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x10001, @remote}, @in6={0xa, 0x4e20, 0x7, @ipv4={[], [], @multicast2}, 0xf4}, @in6={0xa, 0x4e24, 0x8, @empty, 0xfff}, @in6={0xa, 0x4e23, 0xfffffffffffffffc, @loopback, 0x8}]}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={r4, 0x1}, 0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r5 = dup2(r3, r3) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r5, 0xc0305615, &(0x7f0000000180)={0x0, {0xf1, 0x6}}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r6 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8e9860a65dbc934b3ce8be21df489e5e891247efa0cd9625773feb92544da6c3324de170e4aaa9982b59b6589f61456b5463910998c7f1826cb52c658e7cfbe0461f5618e427a295f54803de78f3a16ea4f32218980b9cd229271002c2f0d6fefea8217fa5177fd6bb9968f75cfe76046d66bfaa95b1dbdc73350bd980488e32e65b7e01aedb8e0b40e3"], 0x1}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xd718, 0x10001, 0x3}, &(0x7f00000000c0)=0x10) modify_ldt$read_default(0x2, &(0x7f0000000380)=""/10, 0xa) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r7, 0xffffffffffffffe0}, 0x8) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000003f80000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:56 executing program 2 (fault-call:9 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x40, 0x5438ec48224a416f) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff00000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x232b3c0f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="95116fa03db295b7f7ad63c09ebb3adb2b58573e2e30b4ce98fc4c8daf9635b49ffe1f7be218bbda20f7ff05db0955fb5c805713cb65ba1c20389473ee0378db"], 0x1}}, 0x0) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000407f80000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000025fb0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1644.776685][T28106] FAULT_INJECTION: forcing a failure. [ 1644.776685][T28106] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.796201][T28106] CPU: 1 PID: 28106 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1644.804245][T28106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1644.814510][T28106] Call Trace: [ 1644.817828][T28106] dump_stack+0x172/0x1f0 [ 1644.822173][T28106] should_fail.cold+0xa/0x15 [ 1644.826774][T28106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1644.832600][T28106] ? ___might_sleep+0x163/0x280 [ 1644.837466][T28106] __should_failslab+0x121/0x190 [ 1644.842418][T28106] should_failslab+0x9/0x14 [ 1644.846932][T28106] kmem_cache_alloc_node_trace+0x270/0x720 [ 1644.852756][T28106] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.858323][T28106] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1644.863616][T28106] ? retint_kernel+0x2d/0x2d [ 1644.868243][T28106] __kmalloc_node+0x3d/0x70 [ 1644.872853][T28106] sbitmap_init_node+0x29e/0x510 [ 1644.877903][T28106] sbitmap_queue_init_node+0x40/0x710 [ 1644.883294][T28106] blk_mq_init_tags+0x119/0x2c0 [ 1644.888163][T28106] blk_mq_alloc_rq_map+0x88/0x200 [ 1644.893198][T28106] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1644.898402][T28106] ? kasan_kmalloc+0x9/0x10 [ 1644.902934][T28106] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1644.908157][T28106] loop_add+0x286/0x8d0 [ 1644.912339][T28106] ? idr_find+0x47/0x60 [ 1644.916509][T28106] loop_control_ioctl+0x165/0x360 [ 1644.921646][T28106] ? loop_add+0x8d0/0x8d0 [ 1644.926006][T28106] ? loop_add+0x8d0/0x8d0 [ 1644.930358][T28106] do_vfs_ioctl+0xd6e/0x1390 [ 1644.934964][T28106] ? ioctl_preallocate+0x210/0x210 [ 1644.940102][T28106] ? smack_file_ioctl+0x196/0x310 [ 1644.945148][T28106] ? smack_inode_rename+0x2d0/0x2d0 [ 1644.950370][T28106] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1644.955843][T28106] ? tomoyo_file_ioctl+0x23/0x30 [ 1644.960794][T28106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1644.967060][T28106] ? security_file_ioctl+0x93/0xc0 [ 1644.972189][T28106] ksys_ioctl+0xab/0xd0 [ 1644.976360][T28106] __x64_sys_ioctl+0x73/0xb0 [ 1644.980961][T28106] do_syscall_64+0x103/0x610 [ 1644.985827][T28106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1644.991725][T28106] RIP: 0033:0x458c29 [ 1644.995657][T28106] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1645.015276][T28106] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000003fc0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1645.023703][T28106] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1645.031684][T28106] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1645.039666][T28106] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.047650][T28106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1645.055635][T28106] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 [ 1645.078789][T28106] blk-mq: reduced tag depth (128 -> 64) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffdfd0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:56 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffffe0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000407ff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 2 (fault-call:9 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000fff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000fffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00f0ffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1645.493490][T28121] FAULT_INJECTION: forcing a failure. [ 1645.493490][T28121] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.537760][T28121] CPU: 0 PID: 28121 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1645.545792][T28121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1645.556072][T28121] Call Trace: [ 1645.559446][T28121] dump_stack+0x172/0x1f0 [ 1645.563812][T28121] should_fail.cold+0xa/0x15 [ 1645.568426][T28121] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1645.574254][T28121] ? ___might_sleep+0x163/0x280 [ 1645.579120][T28121] __should_failslab+0x121/0x190 17:25:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_cache\x00') mount$9p_virtio(&(0x7f0000000240)='vxcan1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0xc, &(0x7f0000000300)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x1}}, {@cache_loose='cache=loose'}, {@aname={'aname', 0x3d, '/dev/snd/pcmC#D#c\x00'}}, {@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}], [{@audit='audit'}]}}) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000200)={0x0, 0x4, 0x9, 0x1}, 0xfffffe02) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="d247b196152065542e2b06c2ad"], 0x1}}, 0x0) [ 1645.584445][T28121] should_failslab+0x9/0x14 [ 1645.589067][T28121] kmem_cache_alloc_node_trace+0x270/0x720 [ 1645.594894][T28121] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1645.600658][T28121] ? find_next_bit+0x107/0x130 [ 1645.605466][T28121] sbitmap_queue_init_node+0x29e/0x710 [ 1645.610956][T28121] blk_mq_init_tags+0x119/0x2c0 [ 1645.615837][T28121] blk_mq_alloc_rq_map+0x88/0x200 [ 1645.620971][T28121] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1645.626214][T28121] ? kasan_kmalloc+0x9/0x10 [ 1645.630730][T28121] blk_mq_alloc_tag_set+0x78a/0xd40 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fdfdffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1645.635953][T28121] loop_add+0x286/0x8d0 [ 1645.640206][T28121] ? idr_find+0x47/0x60 [ 1645.644375][T28121] loop_control_ioctl+0x165/0x360 [ 1645.649412][T28121] ? loop_add+0x8d0/0x8d0 [ 1645.653755][T28121] ? loop_add+0x8d0/0x8d0 [ 1645.658200][T28121] do_vfs_ioctl+0xd6e/0x1390 [ 1645.662808][T28121] ? ioctl_preallocate+0x210/0x210 [ 1645.667946][T28121] ? smack_file_ioctl+0x196/0x310 [ 1645.672997][T28121] ? smack_inode_rename+0x2d0/0x2d0 [ 1645.678250][T28121] ? tomoyo_file_ioctl+0x23/0x30 [ 1645.683207][T28121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1645.689463][T28121] ? security_file_ioctl+0x93/0xc0 [ 1645.694595][T28121] ksys_ioctl+0xab/0xd0 [ 1645.698765][T28121] __x64_sys_ioctl+0x73/0xb0 [ 1645.703368][T28121] ? do_syscall_64+0xfe/0x610 [ 1645.708071][T28121] do_syscall_64+0x103/0x610 [ 1645.712799][T28121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1645.718702][T28121] RIP: 0033:0x458c29 17:25:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3aba24a09ac5ef4b77eca61d2c1a87befba8d58dc0ae24fe91ac192c027464287a561ffc77133c6a16d44e07ecc732ebc574d263c3396478b3e9c9a7b305007a7ffb19fbbbcfc08ea5a3a634e3a5fc63cb05d353"], 0x1}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f00000000c0)={@mcast2, r3}, 0x14) [ 1645.722614][T28121] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1645.742493][T28121] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1645.750923][T28121] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1645.758911][T28121] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1645.766905][T28121] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.774981][T28121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1645.782969][T28121] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="7fffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1645.809612][T28121] blk-mq: reduced tag depth (128 -> 64) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="8cffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="c9ffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x802, 0xfffdfffffffffffc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="391b9b15247eb56717d7602c077fb5ff5dcc7b190cd9c47206bd6e6607108c4fad25618a0a12c27f"], 0x1}}, 0x0) 17:25:57 executing program 2 (fault-call:9 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="e4ffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:57 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ebffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1646.202612][T28495] FAULT_INJECTION: forcing a failure. [ 1646.202612][T28495] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.235203][T28495] CPU: 1 PID: 28495 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1646.243243][T28495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.253313][T28495] Call Trace: [ 1646.256629][T28495] dump_stack+0x172/0x1f0 [ 1646.260981][T28495] should_fail.cold+0xa/0x15 [ 1646.265597][T28495] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1646.271423][T28495] ? ___might_sleep+0x163/0x280 [ 1646.276291][T28495] __should_failslab+0x121/0x190 [ 1646.281250][T28495] should_failslab+0x9/0x14 [ 1646.285772][T28495] kmem_cache_alloc_node_trace+0x270/0x720 [ 1646.291769][T28495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1646.298072][T28495] ? sbitmap_init_node+0x149/0x510 [ 1646.303215][T28495] sbitmap_queue_init_node+0x29e/0x710 [ 1646.308706][T28495] blk_mq_init_tags+0x17b/0x2c0 [ 1646.313576][T28495] blk_mq_alloc_rq_map+0x88/0x200 [ 1646.318619][T28495] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1646.323828][T28495] ? kasan_kmalloc+0x9/0x10 [ 1646.328351][T28495] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1646.333659][T28495] loop_add+0x286/0x8d0 [ 1646.337824][T28495] ? idr_find+0x47/0x60 [ 1646.341999][T28495] loop_control_ioctl+0x165/0x360 [ 1646.347068][T28495] ? loop_add+0x8d0/0x8d0 [ 1646.351416][T28495] ? loop_add+0x8d0/0x8d0 [ 1646.355848][T28495] do_vfs_ioctl+0xd6e/0x1390 [ 1646.360459][T28495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1646.365930][T28495] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1646.371232][T28495] ? ioctl_preallocate+0x210/0x210 [ 1646.376382][T28495] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1646.381877][T28495] ? retint_kernel+0x2d/0x2d [ 1646.386492][T28495] ? security_file_ioctl+0x93/0xc0 [ 1646.391624][T28495] ksys_ioctl+0xab/0xd0 [ 1646.395798][T28495] __x64_sys_ioctl+0x73/0xb0 [ 1646.400401][T28495] ? do_syscall_64+0xfe/0x610 [ 1646.405111][T28495] do_syscall_64+0x103/0x610 [ 1646.409723][T28495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1646.415625][T28495] RIP: 0033:0x458c29 [ 1646.419532][T28495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1646.439160][T28495] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="f5ffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000002c0)) sendto$inet(r1, 0x0, 0xffffffffffffff4c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x182, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x3d, 0x50, &(0x7f0000000100)="3f583f3ca38c849ab7d497b3bb405b0700c91997edc02dadbb78d4910d379615d62c19b67cf613ec3a449ca670d258e79bb6c815fc2c35a3adf4391910", &(0x7f0000000200)=""/80, 0x14000000000}, 0x28) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r4 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="facc501725422687ac05cf824451235f4fde122b00000000daef6e530b2bc8f26218eba0c4d6b9d6b79cc4752d030000001673861304720c3ec0d2cdb4de87dd18f96b4ee7cb5790a79f3b4e44574433e7b568dd272c04d2e8fda08cf8efcf465b5b71c50ae97edd2e85c677d440ec931ec6610c609f3554a3e22448bc7ed63876c200985a7b5785581b2dc398ccee2166ea69b5aacdb5267afd04a7cb62f79c46a66105e29d94b8d1f4dee23347297be52568acd941ec9ee0f7c1ded6d127fd5d11ef23a4a2084400000000000000cd2fb853145be6c23a82744a0872daccf4f6f60d304c0f8819cd5809dbb15e0341b23178aa1775395077fd8bb99802611e1d1eac7f2c5d97ccdd0079b101dd093b9d0a8d586f5867328cdf7266a6e01657bbf9cf3fea3cb0976420550870093da86f9288921f575958c4952d1aae4137a40cd12d0b49ba5afbb3f8a0b767f7bc58183fa9d86c3d561b2e1b6607b5f7ae8aa0c6908dbff77ee4924467bf91a5299bec99d851834b763fe63efe38aadd4faa14f1194ccae87777de339ea3176aeab396aa5f77ab4f6f9b53db7413ea39ca1594bbfcd04d466c8b0d470ee3330227afbd73d7bf525a2aace686edb3204d06ae9c436a55cbc697c8f9f0419dc1aaa3473600f44a871e5c81b1caf7a1285d373b13e82cf940c475883cd2facdd4b10dbb9d2fd8570837783d453fd253a49bc82c3f139073"], 0x1}}, 0x0) [ 1646.447625][T28495] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1646.455613][T28495] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1646.463880][T28495] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1646.472249][T28495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1646.480414][T28495] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="f6ffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1646.523252][T28495] blk-mq: reduced tag depth (128 -> 64) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="feffffff0000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000001000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:58 executing program 2 (fault-call:9 fault-nth:7): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="ffffffff8760000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000010000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000040000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1646.932527][T28564] FAULT_INJECTION: forcing a failure. [ 1646.932527][T28564] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.953796][T28564] CPU: 0 PID: 28564 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1646.961819][T28564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1646.971883][T28564] Call Trace: [ 1646.975200][T28564] dump_stack+0x172/0x1f0 [ 1646.979604][T28564] should_fail.cold+0xa/0x15 [ 1646.984237][T28564] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1646.990072][T28564] ? ___might_sleep+0x163/0x280 [ 1646.994967][T28564] __should_failslab+0x121/0x190 [ 1646.999917][T28564] should_failslab+0x9/0x14 [ 1647.004436][T28564] kmem_cache_alloc_node_trace+0x270/0x720 [ 1647.010270][T28564] __kmalloc_node+0x3d/0x70 [ 1647.014789][T28564] blk_mq_alloc_rq_map+0xb9/0x200 [ 1647.019833][T28564] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1647.025131][T28564] ? blk_mq_alloc_tag_set+0x6b0/0xd40 [ 1647.030520][T28564] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1647.035850][T28564] loop_add+0x286/0x8d0 [ 1647.040022][T28564] ? idr_find+0x47/0x60 [ 1647.044209][T28564] loop_control_ioctl+0x165/0x360 [ 1647.049247][T28564] ? loop_add+0x8d0/0x8d0 [ 1647.053701][T28564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1647.059192][T28564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1647.064686][T28564] ? loop_add+0x8d0/0x8d0 [ 1647.069026][T28564] do_vfs_ioctl+0xd6e/0x1390 [ 1647.073736][T28564] ? ioctl_preallocate+0x210/0x210 [ 1647.078864][T28564] ? retint_kernel+0x2d/0x2d [ 1647.083589][T28564] ? security_file_ioctl+0x89/0xc0 [ 1647.088710][T28564] ? write_comp_data+0x9/0x70 [ 1647.093397][T28564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1647.099734][T28564] ? security_file_ioctl+0x93/0xc0 [ 1647.104854][T28564] ksys_ioctl+0xab/0xd0 [ 1647.109023][T28564] __x64_sys_ioctl+0x73/0xb0 [ 1647.113748][T28564] do_syscall_64+0x103/0x610 [ 1647.118357][T28564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1647.124253][T28564] RIP: 0033:0x458c29 [ 1647.128260][T28564] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1647.147889][T28564] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.156324][T28564] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1647.164415][T28564] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.172649][T28564] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.180719][T28564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1647.188723][T28564] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 [ 1647.200989][T28564] blk-mq: reduced tag depth (128 -> 64) 17:25:58 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000004080000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 2 (fault-call:9 fault-nth:8): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000100000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) ioctl$VT_RELDISP(r2, 0x5605) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="702d856b6f49ac82a0867452dc8c01986792c852c38de80fd1598b24fb3298ae4c629981dd95b92545216f1505c96318280271234a4a4bc388255fa034a2efcf7b206b7306f8bb2f8f83"], 0x1}}, 0x0) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000200000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000810000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1647.512793][T28675] FAULT_INJECTION: forcing a failure. [ 1647.512793][T28675] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.532783][T28675] CPU: 0 PID: 28675 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1647.540805][T28675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.550915][T28675] Call Trace: [ 1647.554402][T28675] dump_stack+0x172/0x1f0 [ 1647.558756][T28675] should_fail.cold+0xa/0x15 [ 1647.563366][T28675] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1647.569190][T28675] ? ___might_sleep+0x163/0x280 [ 1647.574067][T28675] __should_failslab+0x121/0x190 [ 1647.579018][T28675] should_failslab+0x9/0x14 [ 1647.583548][T28675] kmem_cache_alloc_node_trace+0x270/0x720 [ 1647.589370][T28675] ? kasan_unpoison_shadow+0x35/0x50 [ 1647.594696][T28675] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1647.600636][T28675] __kmalloc_node+0x3d/0x70 [ 1647.605177][T28675] blk_mq_alloc_rq_map+0xfa/0x200 [ 1647.610236][T28675] __blk_mq_alloc_rq_map+0xb1/0x2e0 [ 1647.615476][T28675] ? kasan_kmalloc+0x9/0x10 [ 1647.619997][T28675] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1647.625228][T28675] loop_add+0x286/0x8d0 [ 1647.629393][T28675] ? idr_find+0x47/0x60 [ 1647.633825][T28675] loop_control_ioctl+0x165/0x360 [ 1647.638858][T28675] ? loop_add+0x8d0/0x8d0 [ 1647.643196][T28675] ? loop_add+0x8d0/0x8d0 [ 1647.647540][T28675] do_vfs_ioctl+0xd6e/0x1390 [ 1647.652148][T28675] ? ioctl_preallocate+0x210/0x210 [ 1647.657272][T28675] ? smack_file_ioctl+0x196/0x310 [ 1647.662303][T28675] ? smack_inode_rename+0x2d0/0x2d0 [ 1647.667523][T28675] ? tomoyo_file_ioctl+0x23/0x30 [ 1647.672502][T28675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1647.678766][T28675] ? security_file_ioctl+0x93/0xc0 [ 1647.683893][T28675] ksys_ioctl+0xab/0xd0 [ 1647.688092][T28675] __x64_sys_ioctl+0x73/0xb0 [ 1647.692776][T28675] ? do_syscall_64+0x5b/0x610 [ 1647.697464][T28675] do_syscall_64+0x103/0x610 [ 1647.702081][T28675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1647.707981][T28675] RIP: 0033:0x458c29 [ 1647.711888][T28675] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1647.731506][T28675] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1647.739948][T28675] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1647.747932][T28675] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1647.755911][T28675] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.763992][T28675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1647.771990][T28675] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="fffffffffffff00000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1647.813219][T28675] blk-mq: reduced tag depth (128 -> 64) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 2 (fault-call:9 fault-nth:9): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:25:59 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1648.114539][T28691] FAULT_INJECTION: forcing a failure. [ 1648.114539][T28691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1648.135758][T28691] CPU: 0 PID: 28691 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1648.143778][T28691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.153848][T28691] Call Trace: [ 1648.157173][T28691] dump_stack+0x172/0x1f0 [ 1648.161527][T28691] should_fail.cold+0xa/0x15 [ 1648.166137][T28691] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1648.171957][T28691] ? ___might_sleep+0x163/0x280 [ 1648.176824][T28691] should_fail_alloc_page+0x50/0x60 [ 1648.182051][T28691] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1648.187446][T28691] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1648.193180][T28691] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1648.199523][T28691] ? find_next_bit+0x107/0x130 [ 1648.204456][T28691] ? __cpu_to_node+0x7e/0xa0 [ 1648.209081][T28691] ? blk_mq_hw_queue_to_node+0xf1/0x140 [ 1648.214646][T28691] blk_mq_alloc_rqs+0x223/0x7f0 [ 1648.219515][T28691] ? __kmalloc_node+0x4e/0x70 [ 1648.224322][T28691] __blk_mq_alloc_rq_map+0x15f/0x2e0 [ 1648.229621][T28691] ? kasan_kmalloc+0x9/0x10 [ 1648.234143][T28691] blk_mq_alloc_tag_set+0x78a/0xd40 [ 1648.239478][T28691] loop_add+0x286/0x8d0 [ 1648.243733][T28691] ? idr_find+0x47/0x60 [ 1648.247900][T28691] loop_control_ioctl+0x165/0x360 [ 1648.252939][T28691] ? loop_add+0x8d0/0x8d0 [ 1648.257284][T28691] ? loop_add+0x8d0/0x8d0 [ 1648.261638][T28691] do_vfs_ioctl+0xd6e/0x1390 [ 1648.266244][T28691] ? ioctl_preallocate+0x210/0x210 [ 1648.271461][T28691] ? smack_file_ioctl+0x196/0x310 [ 1648.276495][T28691] ? smack_inode_rename+0x2d0/0x2d0 [ 1648.281713][T28691] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1648.287197][T28691] ? tomoyo_file_ioctl+0x23/0x30 [ 1648.292237][T28691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1648.298495][T28691] ? security_file_ioctl+0x93/0xc0 [ 1648.303650][T28691] ksys_ioctl+0xab/0xd0 [ 1648.307837][T28691] __x64_sys_ioctl+0x73/0xb0 [ 1648.312445][T28691] do_syscall_64+0x103/0x610 [ 1648.317070][T28691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1648.322983][T28691] RIP: 0033:0x458c29 [ 1648.326894][T28691] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.346526][T28691] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.355155][T28691] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 17:26:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in6=@dev}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x2, 0x1a, 0x8, 0x0, 0xc}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1648.363141][T28691] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1648.371130][T28691] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.379120][T28691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1648.387106][T28691] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:00 executing program 2 (fault-call:9 fault-nth:10): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1648.653380][T28806] FAULT_INJECTION: forcing a failure. [ 1648.653380][T28806] name failslab, interval 1, probability 0, space 0, times 0 [ 1648.675573][T28806] CPU: 1 PID: 28806 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1648.683617][T28806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.693873][T28806] Call Trace: [ 1648.697193][T28806] dump_stack+0x172/0x1f0 [ 1648.701561][T28806] should_fail.cold+0xa/0x15 [ 1648.706177][T28806] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1648.712045][T28806] ? ___might_sleep+0x163/0x280 [ 1648.716918][T28806] __should_failslab+0x121/0x190 [ 1648.721877][T28806] should_failslab+0x9/0x14 [ 1648.726392][T28806] kmem_cache_alloc_node+0x264/0x710 [ 1648.731702][T28806] ? debug_mutex_init+0x2d/0x60 [ 1648.736571][T28806] ? __mutex_init+0xef/0x130 [ 1648.741417][T28806] blk_alloc_queue_node+0x32/0x760 [ 1648.746588][T28806] blk_mq_init_queue+0x4a/0xb0 [ 1648.751590][T28806] loop_add+0x2dd/0x8d0 [ 1648.756643][T28806] ? idr_find+0x47/0x60 [ 1648.760847][T28806] loop_control_ioctl+0x165/0x360 [ 1648.765984][T28806] ? loop_add+0x8d0/0x8d0 [ 1648.770714][T28806] ? loop_add+0x8d0/0x8d0 [ 1648.775081][T28806] do_vfs_ioctl+0xd6e/0x1390 [ 1648.779807][T28806] ? ioctl_preallocate+0x210/0x210 [ 1648.784936][T28806] ? smack_file_ioctl+0x196/0x310 [ 1648.790003][T28806] ? smack_inode_rename+0x2d0/0x2d0 [ 1648.795439][T28806] ? tomoyo_file_ioctl+0x23/0x30 [ 1648.800655][T28806] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1648.807009][T28806] ? security_file_ioctl+0x93/0xc0 [ 1648.812175][T28806] ksys_ioctl+0xab/0xd0 [ 1648.816358][T28806] __x64_sys_ioctl+0x73/0xb0 [ 1648.820970][T28806] do_syscall_64+0x103/0x610 [ 1648.825599][T28806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1648.831578][T28806] RIP: 0033:0x458c29 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1648.835501][T28806] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.855560][T28806] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.863992][T28806] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1648.871973][T28806] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1648.880124][T28806] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.888103][T28806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1648.896110][T28806] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:00 executing program 2 (fault-call:9 fault-nth:11): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:00 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000001000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1649.063946][T28815] FAULT_INJECTION: forcing a failure. [ 1649.063946][T28815] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.077192][T28815] CPU: 0 PID: 28815 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1649.085197][T28815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.095270][T28815] Call Trace: [ 1649.098589][T28815] dump_stack+0x172/0x1f0 [ 1649.102942][T28815] should_fail.cold+0xa/0x15 [ 1649.107557][T28815] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1649.113396][T28815] ? ___might_sleep+0x163/0x280 [ 1649.118267][T28815] __should_failslab+0x121/0x190 [ 1649.123241][T28815] should_failslab+0x9/0x14 [ 1649.127758][T28815] kmem_cache_alloc_node_trace+0x270/0x720 [ 1649.133599][T28815] ? lockdep_init_map+0x1be/0x6d0 [ 1649.138640][T28815] __kmalloc_node+0x3d/0x70 [ 1649.143155][T28815] ? mempool_alloc+0x380/0x380 [ 1649.147934][T28815] ? mempool_free+0x380/0x380 [ 1649.152619][T28815] mempool_init_node+0x138/0x560 [ 1649.157569][T28815] ? wait_for_completion+0x440/0x440 [ 1649.162866][T28815] ? mempool_alloc+0x380/0x380 [ 1649.167636][T28815] ? mempool_free+0x380/0x380 [ 1649.172321][T28815] mempool_init+0x3d/0x50 [ 1649.176824][T28815] bioset_init+0x33a/0x700 [ 1649.181283][T28815] blk_alloc_queue_node+0x137/0x760 [ 1649.186973][T28815] blk_mq_init_queue+0x4a/0xb0 [ 1649.191755][T28815] loop_add+0x2dd/0x8d0 [ 1649.196098][T28815] ? idr_find+0x47/0x60 [ 1649.200274][T28815] loop_control_ioctl+0x165/0x360 [ 1649.205425][T28815] ? loop_add+0x8d0/0x8d0 [ 1649.209862][T28815] ? loop_add+0x8d0/0x8d0 [ 1649.214213][T28815] do_vfs_ioctl+0xd6e/0x1390 [ 1649.219096][T28815] ? ioctl_preallocate+0x210/0x210 [ 1649.224933][T28815] ? smack_file_ioctl+0x196/0x310 [ 1649.230144][T28815] ? smack_inode_rename+0x2d0/0x2d0 [ 1649.235372][T28815] ? tomoyo_file_ioctl+0x23/0x30 [ 1649.240499][T28815] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1649.246764][T28815] ? security_file_ioctl+0x93/0xc0 [ 1649.251913][T28815] ksys_ioctl+0xab/0xd0 [ 1649.256097][T28815] __x64_sys_ioctl+0x73/0xb0 [ 1649.260702][T28815] do_syscall_64+0x103/0x610 [ 1649.265316][T28815] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1649.271390][T28815] RIP: 0033:0x458c29 [ 1649.275479][T28815] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1649.295903][T28815] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.304339][T28815] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = msgget(0x0, 0x2e9) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000040)=""/49) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 1649.312329][T28815] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1649.320930][T28815] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1649.330587][T28815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1649.338950][T28815] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:01 executing program 2 (fault-call:9 fault-nth:12): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:01 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000001200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:01 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000001400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1649.464401][T28924] FAULT_INJECTION: forcing a failure. [ 1649.464401][T28924] name failslab, interval 1, probability 0, space 0, times 0 [ 1649.487564][T28924] CPU: 0 PID: 28924 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1649.495578][T28924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1649.505760][T28924] Call Trace: [ 1649.511158][T28924] dump_stack+0x172/0x1f0 [ 1649.516552][T28924] should_fail.cold+0xa/0x15 [ 1649.521169][T28924] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1649.527006][T28924] ? ___might_sleep+0x163/0x280 [ 1649.532267][T28924] __should_failslab+0x121/0x190 [ 1649.537823][T28924] should_failslab+0x9/0x14 [ 1649.542341][T28924] kmem_cache_alloc+0x2b2/0x6f0 [ 1649.547316][T28924] ? mempool_alloc_slab+0x13/0x60 [ 1649.552446][T28924] ? mempool_free+0x380/0x380 [ 1649.557136][T28924] mempool_alloc_slab+0x47/0x60 [ 1649.562096][T28924] ? mempool_alloc+0x380/0x380 [ 1649.566914][T28924] mempool_init_node+0x2e1/0x560 [ 1649.572493][T28924] ? mempool_alloc+0x380/0x380 [ 1649.577635][T28924] ? mempool_free+0x380/0x380 [ 1649.583758][T28924] mempool_init+0x3d/0x50 [ 1649.589083][T28924] bioset_init+0x33a/0x700 [ 1649.593529][T28924] blk_alloc_queue_node+0x137/0x760 [ 1649.598753][T28924] blk_mq_init_queue+0x4a/0xb0 [ 1649.603630][T28924] loop_add+0x2dd/0x8d0 [ 1649.607806][T28924] ? idr_find+0x47/0x60 [ 1649.612193][T28924] loop_control_ioctl+0x165/0x360 [ 1649.617246][T28924] ? loop_add+0x8d0/0x8d0 [ 1649.622255][T28924] ? loop_add+0x8d0/0x8d0 [ 1649.626636][T28924] do_vfs_ioctl+0xd6e/0x1390 [ 1649.631734][T28924] ? ioctl_preallocate+0x210/0x210 [ 1649.636949][T28924] ? smack_file_ioctl+0x196/0x310 [ 1649.642252][T28924] ? smack_inode_rename+0x2d0/0x2d0 [ 1649.647483][T28924] ? tomoyo_file_ioctl+0x23/0x30 [ 1649.652440][T28924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1649.658967][T28924] ? security_file_ioctl+0x93/0xc0 [ 1649.664878][T28924] ksys_ioctl+0xab/0xd0 [ 1649.671330][T28924] __x64_sys_ioctl+0x73/0xb0 [ 1649.675946][T28924] do_syscall_64+0x103/0x610 [ 1649.683697][T28924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1649.690485][T28924] RIP: 0033:0x458c29 [ 1649.694582][T28924] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1649.716374][T28924] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1649.724807][T28924] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1649.732964][T28924] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1649.740946][T28924] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1649.748930][T28924] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1649.756920][T28924] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:01 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000001600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:01 executing program 2 (fault-call:9 fault-nth:13): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:01 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000001f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1650.116272][T28933] FAULT_INJECTION: forcing a failure. [ 1650.116272][T28933] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.144841][T28933] CPU: 1 PID: 28933 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1650.152910][T28933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.162999][T28933] Call Trace: [ 1650.166350][T28933] dump_stack+0x172/0x1f0 [ 1650.170731][T28933] should_fail.cold+0xa/0x15 [ 1650.175381][T28933] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1650.181413][T28933] ? ___might_sleep+0x163/0x280 [ 1650.186325][T28933] __should_failslab+0x121/0x190 [ 1650.191305][T28933] should_failslab+0x9/0x14 [ 1650.195855][T28933] kmem_cache_alloc+0x2b2/0x6f0 [ 1650.200754][T28933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1650.207032][T28933] ? __phys_addr+0xa4/0x120 [ 1650.211600][T28933] ? mempool_init+0x3d/0x50 [ 1650.216166][T28933] mempool_alloc_slab+0x47/0x60 [ 1650.221455][T28933] ? mempool_alloc+0x380/0x380 [ 1650.226939][T28933] mempool_init_node+0x2e1/0x560 [ 1650.231959][T28933] ? mempool_alloc+0x380/0x380 [ 1650.236775][T28933] ? mempool_free+0x380/0x380 [ 1650.241693][T28933] mempool_init+0x3d/0x50 [ 1650.246108][T28933] bioset_init+0x33a/0x700 [ 1650.251981][T28933] blk_alloc_queue_node+0x137/0x760 [ 1650.257383][T28933] blk_mq_init_queue+0x4a/0xb0 [ 1650.262200][T28933] loop_add+0x2dd/0x8d0 [ 1650.266554][T28933] ? idr_find+0x47/0x60 [ 1650.270953][T28933] loop_control_ioctl+0x165/0x360 [ 1650.276353][T28933] ? loop_add+0x8d0/0x8d0 [ 1650.280838][T28933] ? loop_add+0x8d0/0x8d0 [ 1650.285225][T28933] do_vfs_ioctl+0xd6e/0x1390 [ 1650.289971][T28933] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1650.296633][T28933] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1650.302109][T28933] ? ioctl_preallocate+0x210/0x210 [ 1650.307326][T28933] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1650.313131][T28933] ? retint_kernel+0x2d/0x2d [ 1650.317818][T28933] ksys_ioctl+0xab/0xd0 [ 1650.322591][T28933] __x64_sys_ioctl+0x73/0xb0 [ 1650.327361][T28933] do_syscall_64+0x103/0x610 [ 1650.332051][T28933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.338338][T28933] RIP: 0033:0x458c29 [ 1650.342270][T28933] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.362131][T28933] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.371051][T28933] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1650.381759][T28933] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.389878][T28933] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1650.397912][T28933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1650.405932][T28933] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000002000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000002300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:02 executing program 2 (fault-call:9 fault-nth:14): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000000f2300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1650.632894][T29042] FAULT_INJECTION: forcing a failure. [ 1650.632894][T29042] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.659186][T29042] CPU: 1 PID: 29042 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1650.667295][T29042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1650.677456][T29042] Call Trace: [ 1650.680790][T29042] dump_stack+0x172/0x1f0 [ 1650.685165][T29042] should_fail.cold+0xa/0x15 [ 1650.689990][T29042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1650.695841][T29042] ? ___might_sleep+0x163/0x280 [ 1650.700919][T29042] __should_failslab+0x121/0x190 [ 1650.705914][T29042] should_failslab+0x9/0x14 [ 1650.710446][T29042] kmem_cache_alloc_node_trace+0x270/0x720 [ 1650.716257][T29042] ? rcu_read_lock_sched_held+0x110/0x130 [ 1650.721995][T29042] ? lockdep_init_map+0x1be/0x6d0 [ 1650.727062][T29042] __kmalloc_node+0x3d/0x70 [ 1650.731597][T29042] ? mempool_alloc+0x380/0x380 [ 1650.736382][T29042] ? mempool_free+0x380/0x380 [ 1650.741095][T29042] mempool_init_node+0x138/0x560 [ 1650.746089][T29042] ? mempool_alloc+0x380/0x380 [ 1650.750871][T29042] ? mempool_free+0x380/0x380 [ 1650.756003][T29042] mempool_init+0x3d/0x50 [ 1650.760371][T29042] bioset_init+0x536/0x700 [ 1650.764826][T29042] blk_alloc_queue_node+0x137/0x760 [ 1650.770139][T29042] blk_mq_init_queue+0x4a/0xb0 [ 1650.775009][T29042] loop_add+0x2dd/0x8d0 [ 1650.779450][T29042] ? idr_find+0x47/0x60 [ 1650.783632][T29042] loop_control_ioctl+0x165/0x360 [ 1650.788690][T29042] ? loop_add+0x8d0/0x8d0 [ 1650.793170][T29042] ? loop_add+0x8d0/0x8d0 [ 1650.797802][T29042] do_vfs_ioctl+0xd6e/0x1390 [ 1650.802431][T29042] ? ioctl_preallocate+0x210/0x210 [ 1650.807575][T29042] ? retint_kernel+0x2d/0x2d [ 1650.812189][T29042] ? security_file_ioctl+0x89/0xc0 [ 1650.817319][T29042] ? tomoyo_file_ioctl+0x23/0x30 [ 1650.822277][T29042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1650.828543][T29042] ? security_file_ioctl+0x93/0xc0 [ 1650.833680][T29042] ksys_ioctl+0xab/0xd0 [ 1650.837856][T29042] __x64_sys_ioctl+0x73/0xb0 [ 1650.842473][T29042] ? do_syscall_64+0x5b/0x610 [ 1650.847193][T29042] do_syscall_64+0x103/0x610 [ 1650.851808][T29042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1650.857717][T29042] RIP: 0033:0x458c29 [ 1650.862323][T29042] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1650.882041][T29042] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1650.890479][T29042] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1650.899594][T29042] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1650.907858][T29042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1650.915844][T29042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1650.923836][T29042] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000002500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000013a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:02 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) 17:26:02 executing program 2 (fault-call:9 fault-nth:15): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000003f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:02 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000004000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1651.182778][T29158] FAULT_INJECTION: forcing a failure. [ 1651.182778][T29158] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.234510][T29158] CPU: 0 PID: 29158 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1651.242550][T29158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.252732][T29158] Call Trace: [ 1651.256067][T29158] dump_stack+0x172/0x1f0 [ 1651.260456][T29158] should_fail.cold+0xa/0x15 [ 1651.265087][T29158] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1651.270926][T29158] ? ___might_sleep+0x163/0x280 [ 1651.275801][T29158] __should_failslab+0x121/0x190 [ 1651.280771][T29158] should_failslab+0x9/0x14 [ 1651.285298][T29158] kmem_cache_alloc+0x2b2/0x6f0 [ 1651.290178][T29158] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1651.296009][T29158] ? mempool_free+0x380/0x380 [ 1651.300721][T29158] mempool_alloc_slab+0x47/0x60 [ 1651.305590][T29158] ? mempool_alloc+0x380/0x380 [ 1651.310373][T29158] mempool_init_node+0x2e1/0x560 [ 1651.315333][T29158] ? mempool_alloc+0x380/0x380 [ 1651.320116][T29158] ? mempool_free+0x380/0x380 [ 1651.324805][T29158] mempool_init+0x3d/0x50 [ 1651.329155][T29158] bioset_init+0x536/0x700 [ 1651.333597][T29158] blk_alloc_queue_node+0x137/0x760 [ 1651.338825][T29158] blk_mq_init_queue+0x4a/0xb0 [ 1651.343606][T29158] loop_add+0x2dd/0x8d0 [ 1651.347809][T29158] ? idr_find+0x47/0x60 [ 1651.351986][T29158] loop_control_ioctl+0x165/0x360 [ 1651.357031][T29158] ? loop_add+0x8d0/0x8d0 [ 1651.361393][T29158] ? loop_add+0x8d0/0x8d0 [ 1651.365758][T29158] do_vfs_ioctl+0xd6e/0x1390 [ 1651.370374][T29158] ? ioctl_preallocate+0x210/0x210 [ 1651.375497][T29158] ? smack_file_ioctl+0x196/0x310 [ 1651.380546][T29158] ? smack_inode_rename+0x2d0/0x2d0 [ 1651.385774][T29158] ? tomoyo_file_ioctl+0x23/0x30 [ 1651.390724][T29158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1651.396990][T29158] ? security_file_ioctl+0x93/0xc0 [ 1651.402139][T29158] ksys_ioctl+0xab/0xd0 [ 1651.406325][T29158] __x64_sys_ioctl+0x73/0xb0 [ 1651.410944][T29158] ? do_syscall_64+0x5b/0x610 [ 1651.415662][T29158] do_syscall_64+0x103/0x610 [ 1651.420276][T29158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.426185][T29158] RIP: 0033:0x458c29 [ 1651.430101][T29158] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1651.450191][T29158] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.458727][T29158] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1651.466714][T29158] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.474725][T29158] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 17:26:03 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000be5a94100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1651.482888][T29158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1651.490960][T29158] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:03 executing program 2 (fault-call:9 fault-nth:16): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:03 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000004800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1651.599196][T29165] FAULT_INJECTION: forcing a failure. [ 1651.599196][T29165] name failslab, interval 1, probability 0, space 0, times 0 [ 1651.613564][T29165] CPU: 1 PID: 29165 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1651.621569][T29165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.631639][T29165] Call Trace: [ 1651.634956][T29165] dump_stack+0x172/0x1f0 [ 1651.639340][T29165] should_fail.cold+0xa/0x15 [ 1651.644055][T29165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1651.649882][T29165] ? ___might_sleep+0x163/0x280 [ 1651.654925][T29165] __should_failslab+0x121/0x190 [ 1651.659935][T29165] should_failslab+0x9/0x14 [ 1651.664461][T29165] kmem_cache_alloc+0x2b2/0x6f0 [ 1651.669324][T29165] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1651.675582][T29165] ? __phys_addr+0xa4/0x120 [ 1651.680097][T29165] ? mempool_init+0x3d/0x50 [ 1651.684638][T29165] mempool_alloc_slab+0x47/0x60 [ 1651.689589][T29165] ? mempool_alloc+0x380/0x380 [ 1651.694364][T29165] mempool_init_node+0x2e1/0x560 [ 1651.699319][T29165] ? mempool_alloc+0x380/0x380 [ 1651.704093][T29165] ? mempool_free+0x380/0x380 [ 1651.708781][T29165] mempool_init+0x3d/0x50 [ 1651.713169][T29165] bioset_init+0x536/0x700 [ 1651.717610][T29165] blk_alloc_queue_node+0x137/0x760 [ 1651.722827][T29165] blk_mq_init_queue+0x4a/0xb0 [ 1651.727608][T29165] loop_add+0x2dd/0x8d0 [ 1651.731769][T29165] ? idr_find+0x47/0x60 [ 1651.735942][T29165] loop_control_ioctl+0x165/0x360 [ 1651.740984][T29165] ? loop_add+0x8d0/0x8d0 [ 1651.745426][T29165] ? loop_add+0x8d0/0x8d0 [ 1651.749872][T29165] do_vfs_ioctl+0xd6e/0x1390 [ 1651.754499][T29165] ? ioctl_preallocate+0x210/0x210 [ 1651.759672][T29165] ? smack_file_ioctl+0x196/0x310 [ 1651.764709][T29165] ? smack_inode_rename+0x2d0/0x2d0 [ 1651.769922][T29165] ? fput_many+0x12c/0x1a0 [ 1651.774352][T29165] ? tomoyo_file_ioctl+0x23/0x30 [ 1651.779298][T29165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1651.785556][T29165] ? security_file_ioctl+0x93/0xc0 [ 1651.790680][T29165] ksys_ioctl+0xab/0xd0 [ 1651.794847][T29165] __x64_sys_ioctl+0x73/0xb0 [ 1651.799457][T29165] do_syscall_64+0x103/0x610 [ 1651.804073][T29165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1651.809974][T29165] RIP: 0033:0x458c29 [ 1651.813874][T29165] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1651.833500][T29165] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.841928][T29165] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:03 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1651.849905][T29165] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1651.857881][T29165] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1651.865861][T29165] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1651.873837][T29165] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:03 executing program 2 (fault-call:9 fault-nth:17): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1651.980624][T29239] FAULT_INJECTION: forcing a failure. [ 1651.980624][T29239] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.007659][T29239] CPU: 1 PID: 29239 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1652.015673][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.025735][T29239] Call Trace: 17:26:03 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0xf1, &(0x7f0000000100)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r3 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2d7e73aaf9673032c61a7299f14fb9e91ea48fe47f577edabf245f3227d468cc5e79da3a92b35476da3dc443b189dec1f8198ef5cb6b394779a82c4947462704388c05bb5513061c9167f507f9778a32142ba1bc713672e8049ffd7451330651d1ad1105e260ab44291368f6a3c7757f520e910558906e3f966033c418ab9c47d1fa40b9000001000000000099494200100000000000003d1fcf2d2e172f7a641f235b036b531f5cbbcf213a4f669b8b08be497a520276be7f274fa4f9e951941ad1fe6ef1b1c8de5c890a37d6efd973a36c01000000c34b72"], 0x1}}, 0x0) [ 1652.029057][T29239] dump_stack+0x172/0x1f0 [ 1652.033415][T29239] should_fail.cold+0xa/0x15 [ 1652.038048][T29239] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1652.043875][T29239] ? ___might_sleep+0x163/0x280 [ 1652.048755][T29239] __should_failslab+0x121/0x190 [ 1652.053708][T29239] should_failslab+0x9/0x14 [ 1652.058223][T29239] kmem_cache_alloc_node_trace+0x270/0x720 [ 1652.064061][T29239] ? mempool_alloc+0x380/0x380 [ 1652.068838][T29239] ? mempool_free+0x380/0x380 [ 1652.073527][T29239] ? mempool_init+0x3d/0x50 [ 1652.078064][T29239] bdi_alloc_node+0x8a/0x100 [ 1652.082858][T29239] blk_alloc_queue_node+0x15d/0x760 [ 1652.090595][T29239] blk_mq_init_queue+0x4a/0xb0 [ 1652.095399][T29239] loop_add+0x2dd/0x8d0 [ 1652.099571][T29239] ? idr_find+0x47/0x60 [ 1652.103742][T29239] loop_control_ioctl+0x165/0x360 [ 1652.108773][T29239] ? loop_add+0x8d0/0x8d0 [ 1652.113114][T29239] ? loop_add+0x8d0/0x8d0 [ 1652.117451][T29239] do_vfs_ioctl+0xd6e/0x1390 [ 1652.122068][T29239] ? ioctl_preallocate+0x210/0x210 17:26:03 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1652.127192][T29239] ? smack_file_ioctl+0x196/0x310 [ 1652.132221][T29239] ? smack_inode_rename+0x2d0/0x2d0 [ 1652.137438][T29239] ? tomoyo_file_ioctl+0x23/0x30 [ 1652.142383][T29239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.149080][T29239] ? security_file_ioctl+0x93/0xc0 [ 1652.154204][T29239] ksys_ioctl+0xab/0xd0 [ 1652.158375][T29239] __x64_sys_ioctl+0x73/0xb0 [ 1652.162973][T29239] do_syscall_64+0x103/0x610 [ 1652.167585][T29239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1652.173725][T29239] RIP: 0033:0x458c29 [ 1652.177628][T29239] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.197250][T29239] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.205675][T29239] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1652.213692][T29239] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.221675][T29239] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:26:03 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000004c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:03 executing program 2 (fault-call:9 fault-nth:18): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1652.229678][T29239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1652.237660][T29239] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1652.335479][T29281] FAULT_INJECTION: forcing a failure. [ 1652.335479][T29281] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.349268][T29281] CPU: 1 PID: 29281 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1652.357296][T29281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.367367][T29281] Call Trace: [ 1652.370682][T29281] dump_stack+0x172/0x1f0 [ 1652.375058][T29281] should_fail.cold+0xa/0x15 [ 1652.379683][T29281] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1652.385503][T29281] ? ___might_sleep+0x163/0x280 [ 1652.390369][T29281] __should_failslab+0x121/0x190 [ 1652.395323][T29281] should_failslab+0x9/0x14 [ 1652.399838][T29281] kmem_cache_alloc_trace+0x2d1/0x760 [ 1652.405237][T29281] ? trace_hardirqs_on+0x67/0x230 [ 1652.410271][T29281] ? kasan_check_read+0x11/0x20 [ 1652.415147][T29281] wb_congested_get_create+0x18d/0x3a0 [ 1652.420620][T29281] wb_init+0x4b3/0x780 [ 1652.424700][T29281] bdi_init+0x2a1/0x420 [ 1652.428860][T29281] bdi_alloc_node+0x9f/0x100 [ 1652.433460][T29281] blk_alloc_queue_node+0x15d/0x760 [ 1652.438666][T29281] blk_mq_init_queue+0x4a/0xb0 [ 1652.443436][T29281] loop_add+0x2dd/0x8d0 [ 1652.447592][T29281] ? idr_find+0x47/0x60 [ 1652.451755][T29281] loop_control_ioctl+0x165/0x360 [ 1652.456778][T29281] ? loop_add+0x8d0/0x8d0 [ 1652.461115][T29281] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1652.466583][T29281] ? loop_add+0x8d0/0x8d0 [ 1652.470934][T29281] do_vfs_ioctl+0xd6e/0x1390 [ 1652.475541][T29281] ? ioctl_preallocate+0x210/0x210 [ 1652.480664][T29281] ? retint_kernel+0x2d/0x2d [ 1652.485267][T29281] ? __sanitizer_cov_trace_const_cmp2+0x20/0x20 [ 1652.491514][T29281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.497763][T29281] ? security_file_ioctl+0x93/0xc0 [ 1652.502877][T29281] ksys_ioctl+0xab/0xd0 [ 1652.507046][T29281] __x64_sys_ioctl+0x73/0xb0 [ 1652.511650][T29281] do_syscall_64+0x103/0x610 [ 1652.516288][T29281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1652.522188][T29281] RIP: 0033:0x458c29 [ 1652.526093][T29281] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.545702][T29281] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.554122][T29281] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1652.562099][T29281] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.570085][T29281] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1652.578062][T29281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1652.586048][T29281] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:04 executing program 2 (fault-call:9 fault-nth:19): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1652.716688][T29289] FAULT_INJECTION: forcing a failure. [ 1652.716688][T29289] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.741972][T29289] CPU: 1 PID: 29289 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1652.749998][T29289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.760079][T29289] Call Trace: [ 1652.763405][T29289] dump_stack+0x172/0x1f0 [ 1652.767751][T29289] should_fail.cold+0xa/0x15 [ 1652.772437][T29289] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1652.778251][T29289] ? ___might_sleep+0x163/0x280 [ 1652.783110][T29289] __should_failslab+0x121/0x190 [ 1652.788058][T29289] should_failslab+0x9/0x14 [ 1652.792574][T29289] kmem_cache_alloc_trace+0x2d1/0x760 [ 1652.797954][T29289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.804200][T29289] ? bdi_init+0x356/0x420 [ 1652.808555][T29289] blk_alloc_queue_stats+0x40/0x100 [ 1652.813760][T29289] blk_alloc_queue_node+0x195/0x760 [ 1652.818979][T29289] blk_mq_init_queue+0x4a/0xb0 [ 1652.823755][T29289] loop_add+0x2dd/0x8d0 [ 1652.827917][T29289] ? idr_find+0x47/0x60 [ 1652.832076][T29289] loop_control_ioctl+0x165/0x360 [ 1652.837114][T29289] ? loop_add+0x8d0/0x8d0 [ 1652.841452][T29289] ? loop_add+0x8d0/0x8d0 [ 1652.845795][T29289] do_vfs_ioctl+0xd6e/0x1390 [ 1652.850400][T29289] ? ioctl_preallocate+0x210/0x210 [ 1652.855606][T29289] ? smack_file_ioctl+0x196/0x310 [ 1652.860639][T29289] ? smack_inode_rename+0x2d0/0x2d0 [ 1652.865861][T29289] ? tomoyo_file_ioctl+0x23/0x30 [ 1652.870811][T29289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1652.877147][T29289] ? security_file_ioctl+0x93/0xc0 [ 1652.882272][T29289] ksys_ioctl+0xab/0xd0 [ 1652.886445][T29289] __x64_sys_ioctl+0x73/0xb0 [ 1652.891056][T29289] do_syscall_64+0x103/0x610 [ 1652.895678][T29289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1652.901575][T29289] RIP: 0033:0x458c29 [ 1652.905484][T29289] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1652.925213][T29289] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.933636][T29289] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1652.941613][T29289] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1652.949588][T29289] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1652.957586][T29289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e4f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:04 executing program 2 (fault-call:9 fault-nth:20): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1652.965572][T29289] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:04 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1653.078708][T29311] FAULT_INJECTION: forcing a failure. [ 1653.078708][T29311] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.093624][T29311] CPU: 1 PID: 29311 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1653.101627][T29311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.111692][T29311] Call Trace: [ 1653.115000][T29311] dump_stack+0x172/0x1f0 [ 1653.119357][T29311] should_fail.cold+0xa/0x15 [ 1653.123958][T29311] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1653.129778][T29311] ? ___might_sleep+0x163/0x280 [ 1653.134642][T29311] __should_failslab+0x121/0x190 [ 1653.139592][T29311] should_failslab+0x9/0x14 [ 1653.144103][T29311] kmem_cache_alloc_trace+0x2d1/0x760 [ 1653.149495][T29311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1653.155748][T29311] ? bdi_init+0x356/0x420 [ 1653.160095][T29311] blk_alloc_queue_stats+0x40/0x100 [ 1653.165316][T29311] blk_alloc_queue_node+0x195/0x760 [ 1653.170531][T29311] blk_mq_init_queue+0x4a/0xb0 [ 1653.175312][T29311] loop_add+0x2dd/0x8d0 [ 1653.179473][T29311] ? idr_find+0x47/0x60 [ 1653.183638][T29311] loop_control_ioctl+0x165/0x360 [ 1653.188671][T29311] ? loop_add+0x8d0/0x8d0 [ 1653.193011][T29311] ? loop_add+0x8d0/0x8d0 [ 1653.197362][T29311] do_vfs_ioctl+0xd6e/0x1390 [ 1653.201963][T29311] ? ioctl_preallocate+0x210/0x210 [ 1653.207082][T29311] ? smack_file_ioctl+0x196/0x310 [ 1653.212116][T29311] ? smack_inode_rename+0x2d0/0x2d0 [ 1653.217346][T29311] ? tomoyo_file_ioctl+0x23/0x30 [ 1653.222288][T29311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1653.228536][T29311] ? security_file_ioctl+0x93/0xc0 [ 1653.233665][T29311] ksys_ioctl+0xab/0xd0 [ 1653.237830][T29311] __x64_sys_ioctl+0x73/0xb0 [ 1653.242426][T29311] do_syscall_64+0x103/0x610 [ 1653.247029][T29311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.252936][T29311] RIP: 0033:0x458c29 [ 1653.256833][T29311] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.276588][T29311] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.285008][T29311] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1653.292994][T29311] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1653.301077][T29311] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1653.309070][T29311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1653.317059][T29311] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="2cdcd0700000000000008f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4f3a43ba5242329b7ecd3eb5bdfbbff228b04b5833eaf21d0701f3f2fae46fb9bdb34"], 0x1}}, 0x0) 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:05 executing program 2 (fault-call:9 fault-nth:21): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1653.489197][T29406] FAULT_INJECTION: forcing a failure. [ 1653.489197][T29406] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.515551][T29406] CPU: 0 PID: 29406 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1653.523565][T29406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.533708][T29406] Call Trace: [ 1653.537010][T29406] dump_stack+0x172/0x1f0 [ 1653.541368][T29406] should_fail.cold+0xa/0x15 [ 1653.545965][T29406] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1653.551870][T29406] __should_failslab+0x121/0x190 [ 1653.556809][T29406] should_failslab+0x9/0x14 [ 1653.561314][T29406] kmem_cache_alloc_trace+0x2d1/0x760 [ 1653.566690][T29406] ? lock_downgrade+0x880/0x880 [ 1653.571618][T29406] blk_iolatency_init+0x4e/0x2f0 [ 1653.576607][T29406] blkcg_init_queue+0x163/0x3d0 [ 1653.581463][T29406] blk_alloc_queue_node+0x541/0x760 [ 1653.586668][T29406] blk_mq_init_queue+0x4a/0xb0 [ 1653.591447][T29406] loop_add+0x2dd/0x8d0 [ 1653.595607][T29406] ? idr_find+0x47/0x60 [ 1653.599767][T29406] loop_control_ioctl+0x165/0x360 [ 1653.604807][T29406] ? loop_add+0x8d0/0x8d0 [ 1653.609145][T29406] ? loop_add+0x8d0/0x8d0 [ 1653.613479][T29406] do_vfs_ioctl+0xd6e/0x1390 [ 1653.618083][T29406] ? ioctl_preallocate+0x210/0x210 [ 1653.623189][T29406] ? smack_file_ioctl+0x196/0x310 [ 1653.628206][T29406] ? smack_inode_rename+0x2d0/0x2d0 [ 1653.633419][T29406] ? tomoyo_file_ioctl+0x23/0x30 [ 1653.638360][T29406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1653.644620][T29406] ? security_file_ioctl+0x93/0xc0 [ 1653.649733][T29406] ksys_ioctl+0xab/0xd0 [ 1653.653890][T29406] __x64_sys_ioctl+0x73/0xb0 [ 1653.658483][T29406] ? do_syscall_64+0x5b/0x610 [ 1653.663160][T29406] do_syscall_64+0x103/0x610 [ 1653.667752][T29406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1653.673635][T29406] RIP: 0033:0x458c29 [ 1653.677528][T29406] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1653.697129][T29406] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1653.705539][T29406] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1653.713503][T29406] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1653.721469][T29406] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1653.729455][T29406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1653.737422][T29406] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000005500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @rand_addr=0x4}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4, {0x2, 0x4e21, @empty}, 'ip6gre0\x00'}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0031d3a101888bb0729caa5d0e691789443470a914da073f71"], 0x1}}, 0x0) 17:26:05 executing program 2 (fault-call:9 fault-nth:22): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1654.006106][T29522] FAULT_INJECTION: forcing a failure. [ 1654.006106][T29522] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.035428][T29522] CPU: 0 PID: 29522 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1654.043435][T29522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.053497][T29522] Call Trace: [ 1654.056807][T29522] dump_stack+0x172/0x1f0 [ 1654.061152][T29522] should_fail.cold+0xa/0x15 [ 1654.065763][T29522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1654.071577][T29522] ? ___might_sleep+0x163/0x280 [ 1654.076435][T29522] __should_failslab+0x121/0x190 [ 1654.081380][T29522] should_failslab+0x9/0x14 [ 1654.085976][T29522] kmem_cache_alloc_node_trace+0x270/0x720 [ 1654.092387][T29522] ? retint_kernel+0x2d/0x2d [ 1654.096992][T29522] iolatency_pd_alloc+0x8d/0x140 [ 1654.101942][T29522] ? iolatency_clear_scaling.isra.0+0x180/0x180 [ 1654.108196][T29522] blkcg_activate_policy+0x128/0x560 [ 1654.113496][T29522] blk_iolatency_init+0x151/0x2f0 [ 1654.118536][T29522] blkcg_init_queue+0x163/0x3d0 [ 1654.123391][T29522] blk_alloc_queue_node+0x541/0x760 [ 1654.128689][T29522] blk_mq_init_queue+0x4a/0xb0 [ 1654.133460][T29522] loop_add+0x2dd/0x8d0 [ 1654.137623][T29522] ? idr_find+0x47/0x60 [ 1654.141789][T29522] loop_control_ioctl+0x165/0x360 [ 1654.146818][T29522] ? loop_add+0x8d0/0x8d0 [ 1654.151157][T29522] ? loop_add+0x8d0/0x8d0 [ 1654.155500][T29522] do_vfs_ioctl+0xd6e/0x1390 [ 1654.160101][T29522] ? ioctl_preallocate+0x210/0x210 [ 1654.165216][T29522] ? smack_file_ioctl+0x196/0x310 [ 1654.170247][T29522] ? smack_inode_rename+0x2d0/0x2d0 [ 1654.175463][T29522] ? tomoyo_file_ioctl+0x23/0x30 [ 1654.180406][T29522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1654.186666][T29522] ? security_file_ioctl+0x93/0xc0 [ 1654.191792][T29522] ksys_ioctl+0xab/0xd0 [ 1654.195959][T29522] __x64_sys_ioctl+0x73/0xb0 [ 1654.200560][T29522] do_syscall_64+0x103/0x610 [ 1654.205255][T29522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1654.211171][T29522] RIP: 0033:0x458c29 [ 1654.215083][T29522] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1654.234702][T29522] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.243126][T29522] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:05 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1654.251099][T29522] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1654.259084][T29522] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1654.267075][T29522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1654.275068][T29522] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:06 executing program 2 (fault-call:9 fault-nth:23): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1654.422486][T29530] FAULT_INJECTION: forcing a failure. [ 1654.422486][T29530] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.436128][T29530] CPU: 1 PID: 29530 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1654.444235][T29530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.454302][T29530] Call Trace: [ 1654.457618][T29530] dump_stack+0x172/0x1f0 [ 1654.462062][T29530] should_fail.cold+0xa/0x15 [ 1654.466663][T29530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1654.472912][T29530] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1654.478755][T29530] __should_failslab+0x121/0x190 [ 1654.483701][T29530] should_failslab+0x9/0x14 [ 1654.488213][T29530] kmem_cache_alloc_node_trace+0x5a/0x720 [ 1654.493939][T29530] ? do_raw_spin_lock+0x12a/0x2e0 [ 1654.498971][T29530] ? rwlock_bug.part.0+0x90/0x90 [ 1654.503908][T29530] ? lock_acquire+0x16f/0x3f0 [ 1654.508595][T29530] iolatency_pd_alloc+0x8d/0x140 [ 1654.513539][T29530] ? iolatency_clear_scaling.isra.0+0x180/0x180 [ 1654.519793][T29530] blkcg_activate_policy+0x242/0x560 [ 1654.525097][T29530] blk_iolatency_init+0x151/0x2f0 [ 1654.530136][T29530] blkcg_init_queue+0x163/0x3d0 [ 1654.534994][T29530] blk_alloc_queue_node+0x541/0x760 [ 1654.540201][T29530] blk_mq_init_queue+0x4a/0xb0 [ 1654.544982][T29530] loop_add+0x2dd/0x8d0 [ 1654.549163][T29530] ? idr_find+0x47/0x60 [ 1654.553417][T29530] loop_control_ioctl+0x165/0x360 [ 1654.558446][T29530] ? loop_add+0x8d0/0x8d0 [ 1654.562808][T29530] ? loop_add+0x8d0/0x8d0 [ 1654.567149][T29530] do_vfs_ioctl+0xd6e/0x1390 [ 1654.571776][T29530] ? ioctl_preallocate+0x210/0x210 [ 1654.576900][T29530] ? smack_file_ioctl+0x196/0x310 [ 1654.581927][T29530] ? smack_inode_rename+0x2d0/0x2d0 [ 1654.587231][T29530] ? tomoyo_file_ioctl+0x23/0x30 [ 1654.592196][T29530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1654.598531][T29530] ? security_file_ioctl+0x93/0xc0 [ 1654.603662][T29530] ksys_ioctl+0xab/0xd0 [ 1654.607826][T29530] __x64_sys_ioctl+0x73/0xb0 [ 1654.612422][T29530] do_syscall_64+0x103/0x610 [ 1654.617028][T29530] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1654.623279][T29530] RIP: 0033:0x458c29 [ 1654.627334][T29530] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1654.647117][T29530] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.655557][T29530] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1654.663535][T29530] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1654.671526][T29530] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1654.679702][T29530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1654.687678][T29530] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="aaab74537602ebf652f59b3c560c00000000800000002339ce98d0a611ac3386b28e60f4a9aed874336bd9a6fb399d06c79f41c77fa403b9e467669e5d49341a79b29ed6cc60f83a0a5b6bd95254f700e7c8b24f8979880bf4da"], 0x1}}, 0x0) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 2 (fault-call:9 fault-nth:24): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1655.116257][T29644] FAULT_INJECTION: forcing a failure. [ 1655.116257][T29644] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.152685][T29644] CPU: 0 PID: 29644 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1655.160722][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.170782][T29644] Call Trace: [ 1655.174098][T29644] dump_stack+0x172/0x1f0 [ 1655.178444][T29644] should_fail.cold+0xa/0x15 [ 1655.183071][T29644] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1655.189085][T29644] ? ___might_sleep+0x163/0x280 [ 1655.193954][T29644] __should_failslab+0x121/0x190 [ 1655.198908][T29644] should_failslab+0x9/0x14 [ 1655.203424][T29644] kmem_cache_alloc_node_trace+0x270/0x720 [ 1655.209318][T29644] ? init_timer_key+0x122/0x370 [ 1655.214191][T29644] blk_throtl_init+0x7d/0x680 [ 1655.218886][T29644] blkcg_init_queue+0x277/0x3d0 [ 1655.223749][T29644] blk_alloc_queue_node+0x541/0x760 [ 1655.228958][T29644] blk_mq_init_queue+0x4a/0xb0 [ 1655.233738][T29644] loop_add+0x2dd/0x8d0 [ 1655.237910][T29644] loop_control_ioctl+0x165/0x360 [ 1655.242941][T29644] ? loop_add+0x8d0/0x8d0 [ 1655.247284][T29644] ? loop_add+0x8d0/0x8d0 [ 1655.251626][T29644] do_vfs_ioctl+0xd6e/0x1390 [ 1655.256233][T29644] ? ioctl_preallocate+0x210/0x210 [ 1655.261352][T29644] ? smack_file_ioctl+0x196/0x310 [ 1655.266389][T29644] ? smack_inode_rename+0x2d0/0x2d0 [ 1655.271696][T29644] ? tomoyo_file_ioctl+0x23/0x30 [ 1655.276638][T29644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1655.282887][T29644] ? security_file_ioctl+0x93/0xc0 [ 1655.288014][T29644] ksys_ioctl+0xab/0xd0 [ 1655.292199][T29644] __x64_sys_ioctl+0x73/0xb0 [ 1655.296808][T29644] do_syscall_64+0x103/0x610 [ 1655.301411][T29644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1655.307309][T29644] RIP: 0033:0x458c29 [ 1655.311224][T29644] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1655.330842][T29644] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.339288][T29644] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1655.347394][T29644] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1655.355374][T29644] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e5f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:06 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1655.363369][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1655.371431][T29644] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000540)=r1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r3 = creat(&(0x7f0000000480)='./file0\x00', 0x40) r4 = getuid() ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f00000004c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xfffffe89) r6 = dup2(r0, r5) recvmsg$kcm(r6, &(0x7f0000000380)={&(0x7f00000000c0)=@caif, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)=""/81, 0x51}, {&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000040)=""/51, 0x33}], 0x3, &(0x7f0000000340)=""/38, 0x26}, 0x10000) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 17:26:07 executing program 2 (fault-call:9 fault-nth:25): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:07 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:07 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1655.859528][T29765] FAULT_INJECTION: forcing a failure. [ 1655.859528][T29765] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.903770][T29765] CPU: 1 PID: 29765 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1655.917019][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.927100][T29765] Call Trace: [ 1655.930413][T29765] dump_stack+0x172/0x1f0 [ 1655.934754][T29765] should_fail.cold+0xa/0x15 [ 1655.939530][T29765] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1655.945356][T29765] ? ___might_sleep+0x163/0x280 [ 1655.950225][T29765] __should_failslab+0x121/0x190 [ 1655.955167][T29765] should_failslab+0x9/0x14 [ 1655.960613][T29765] kmem_cache_alloc_node_trace+0x270/0x720 [ 1655.966447][T29765] throtl_pd_alloc+0x8b/0x990 [ 1655.971155][T29765] ? throtl_schedule_next_dispatch+0x640/0x640 [ 1655.977333][T29765] blkcg_activate_policy+0x128/0x560 [ 1655.982639][T29765] ? throtl_pd_offline+0x210/0x210 [ 1655.987846][T29765] blk_throtl_init+0x459/0x680 [ 1655.992622][T29765] blkcg_init_queue+0x277/0x3d0 [ 1655.997476][T29765] blk_alloc_queue_node+0x541/0x760 [ 1656.002781][T29765] blk_mq_init_queue+0x4a/0xb0 [ 1656.007562][T29765] loop_add+0x2dd/0x8d0 [ 1656.011726][T29765] ? idr_find+0x47/0x60 [ 1656.015890][T29765] loop_control_ioctl+0x165/0x360 [ 1656.020921][T29765] ? loop_add+0x8d0/0x8d0 [ 1656.025258][T29765] ? do_vfs_ioctl+0xca/0x1390 [ 1656.029945][T29765] ? __sanitizer_cov_trace_switch+0x3c/0x80 [ 1656.035848][T29765] ? loop_add+0x8d0/0x8d0 [ 1656.040189][T29765] do_vfs_ioctl+0xd6e/0x1390 [ 1656.044800][T29765] ? ioctl_preallocate+0x210/0x210 [ 1656.049914][T29765] ? smack_file_ioctl+0x196/0x310 [ 1656.055312][T29765] ? smack_inode_rename+0x2d0/0x2d0 [ 1656.060535][T29765] ? tomoyo_file_ioctl+0x23/0x30 [ 1656.065487][T29765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1656.071738][T29765] ? security_file_ioctl+0x93/0xc0 [ 1656.076865][T29765] ksys_ioctl+0xab/0xd0 [ 1656.081047][T29765] __x64_sys_ioctl+0x73/0xb0 [ 1656.085658][T29765] do_syscall_64+0x103/0x610 [ 1656.091758][T29765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1656.097699][T29765] RIP: 0033:0x458c29 17:26:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = gettid() getpgid(r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffc33, 0x6bb4c56029e4fcc0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x80000000, 0x0, 0x8, 0x0, 0x2}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, {0x4, 0x5, 0x7ff, 0x26, 0x40, 0xe8d8}}, 0x8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000400)={@multicast1, @broadcast, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'tunl0\x00', r4}) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newroute={0x28, 0x18, 0x800, 0x70bd29, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x6b, 0xfc, 0x3, 0xfe, 0x0, 0x1200}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x8, 0x0, r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) r6 = dup2(r3, r3) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[]}}, 0x0) 17:26:07 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1656.101601][T29765] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1656.121211][T29765] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.129633][T29765] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1656.137610][T29765] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.145588][T29765] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:26:07 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:07 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/ubi_ctrl\x00', 0x20000, 0x0) sendto$inet6(r0, &(0x7f0000001b80)="b6120dcc1baaf6032b31db13a501c5bdd34401e91e08449d5157b35982e24ee767547ea81e1833d016ce62a184208d8f01a41bd4d5", 0x35, 0x0, &(0x7f0000001bc0)={0xa, 0x4e24, 0xf8, @local, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000001c00)='/dev/snd/seq\x00', 0x0, 0x80102) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001c80)=""/16) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x38c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_extract_tcp_res$synack(&(0x7f0000001c40), 0x1, 0x0) process_vm_writev(r3, &(0x7f0000001780)=[{&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/220, 0xdc}], 0x7, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/140, 0x8c}, {&(0x7f00000018c0)=""/131, 0x83}, {&(0x7f0000001980)=""/66, 0x42}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000001a00)=""/97, 0x61}, {&(0x7f0000001a80)=""/20, 0x14}], 0x7, 0x0) ptrace$pokeuser(0x6, r3, 0x2a, 0x5) r4 = dup2(r2, r2) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="7baaf9fd6de69dbbdf7dc62e888c768670cd52aae524eca54d8efe"], 0x1}}, 0x0) [ 1656.153570][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1656.161561][T29765] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:07 executing program 2 (fault-call:9 fault-nth:26): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:07 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1656.290425][T29779] FAULT_INJECTION: forcing a failure. [ 1656.290425][T29779] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.303249][T29779] CPU: 1 PID: 29779 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1656.311230][T29779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.322089][T29779] Call Trace: [ 1656.325401][T29779] dump_stack+0x172/0x1f0 [ 1656.329751][T29779] should_fail.cold+0xa/0x15 [ 1656.334368][T29779] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1656.340192][T29779] ? mark_held_locks+0xf0/0xf0 [ 1656.344981][T29779] __should_failslab+0x121/0x190 [ 1656.349929][T29779] should_failslab+0x9/0x14 [ 1656.354443][T29779] kmem_cache_alloc_node_trace+0x5a/0x720 [ 1656.360260][T29779] ? rwlock_bug.part.0+0x90/0x90 [ 1656.365204][T29779] ? lock_acquire+0x16f/0x3f0 [ 1656.369890][T29779] ? blkcg_activate_policy+0x14d/0x560 [ 1656.375360][T29779] throtl_pd_alloc+0x8b/0x990 [ 1656.380590][T29779] ? throtl_schedule_next_dispatch+0x640/0x640 [ 1656.386753][T29779] blkcg_activate_policy+0x242/0x560 [ 1656.392066][T29779] blk_throtl_init+0x459/0x680 [ 1656.396841][T29779] blkcg_init_queue+0x277/0x3d0 [ 1656.401703][T29779] blk_alloc_queue_node+0x541/0x760 [ 1656.406911][T29779] blk_mq_init_queue+0x4a/0xb0 [ 1656.411682][T29779] loop_add+0x2dd/0x8d0 [ 1656.415842][T29779] ? idr_find+0x47/0x60 [ 1656.420017][T29779] loop_control_ioctl+0x165/0x360 [ 1656.425069][T29779] ? loop_add+0x8d0/0x8d0 [ 1656.429411][T29779] ? loop_add+0x8d0/0x8d0 [ 1656.433748][T29779] do_vfs_ioctl+0xd6e/0x1390 [ 1656.438350][T29779] ? ioctl_preallocate+0x210/0x210 [ 1656.443463][T29779] ? smack_file_ioctl+0x196/0x310 [ 1656.448492][T29779] ? smack_inode_rename+0x2d0/0x2d0 [ 1656.453710][T29779] ? tomoyo_file_ioctl+0x23/0x30 [ 1656.458654][T29779] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1656.464921][T29779] ? security_file_ioctl+0x93/0xc0 [ 1656.470051][T29779] ksys_ioctl+0xab/0xd0 [ 1656.474219][T29779] __x64_sys_ioctl+0x73/0xb0 [ 1656.478812][T29779] ? do_syscall_64+0x5b/0x610 [ 1656.483493][T29779] do_syscall_64+0x103/0x610 [ 1656.488097][T29779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1656.493988][T29779] RIP: 0033:0x458c29 [ 1656.497887][T29779] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1656.517490][T29779] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.525904][T29779] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:08 executing program 4 (fault-call:10 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1656.533880][T29779] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1656.541852][T29779] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1656.549824][T29779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1656.557798][T29779] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:08 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:08 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:08 executing program 2 (fault-call:9 fault-nth:27): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:08 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1656.874187][T29890] FAULT_INJECTION: forcing a failure. [ 1656.874187][T29890] name failslab, interval 1, probability 0, space 0, times 0 [ 1656.908154][T29890] CPU: 1 PID: 29890 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1656.916186][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.926424][T29890] Call Trace: [ 1656.929736][T29890] dump_stack+0x172/0x1f0 [ 1656.934095][T29890] should_fail.cold+0xa/0x15 [ 1656.938716][T29890] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1656.944530][T29890] ? ___might_sleep+0x163/0x280 [ 1656.949493][T29890] __should_failslab+0x121/0x190 [ 1656.954439][T29890] should_failslab+0x9/0x14 [ 1656.958962][T29890] kmem_cache_alloc_trace+0x2d1/0x760 [ 1656.964345][T29890] ? throtl_pd_free+0x23/0x30 [ 1656.969048][T29890] ? blkcg_activate_policy+0x6a/0x560 [ 1656.974434][T29890] ? blk_mq_queue_stopped+0x130/0x130 [ 1656.979813][T29890] blk_stat_alloc_callback+0x58/0x270 [ 1656.985199][T29890] ? tg_last_low_overflow_time+0x630/0x630 [ 1656.991016][T29890] ? blk_mq_hctx_mark_pending+0x200/0x200 [ 1656.996757][T29890] blk_mq_init_allocated_queue+0x81/0x14c0 [ 1657.002612][T29890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1657.008861][T29890] ? blkcg_init_queue+0x18a/0x3d0 [ 1657.013897][T29890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1657.020144][T29890] ? blk_alloc_queue_node+0x559/0x760 [ 1657.025534][T29890] blk_mq_init_queue+0x62/0xb0 [ 1657.030315][T29890] loop_add+0x2dd/0x8d0 [ 1657.034483][T29890] ? idr_find+0x47/0x60 [ 1657.038653][T29890] loop_control_ioctl+0x165/0x360 [ 1657.043684][T29890] ? loop_add+0x8d0/0x8d0 [ 1657.048032][T29890] ? loop_add+0x8d0/0x8d0 [ 1657.052386][T29890] do_vfs_ioctl+0xd6e/0x1390 [ 1657.056995][T29890] ? ioctl_preallocate+0x210/0x210 [ 1657.062126][T29890] ? smack_file_ioctl+0x196/0x310 [ 1657.067159][T29890] ? smack_inode_rename+0x2d0/0x2d0 [ 1657.072386][T29890] ? tomoyo_file_ioctl+0x23/0x30 [ 1657.077335][T29890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1657.083594][T29890] ? security_file_ioctl+0x93/0xc0 [ 1657.089234][T29890] ksys_ioctl+0xab/0xd0 [ 1657.093403][T29890] __x64_sys_ioctl+0x73/0xb0 [ 1657.098005][T29890] do_syscall_64+0x103/0x610 [ 1657.102618][T29890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1657.108511][T29890] RIP: 0033:0x458c29 [ 1657.112412][T29890] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1657.132028][T29890] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.140546][T29890] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1657.148530][T29890] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1657.156514][T29890] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1657.164506][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 17:26:08 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r0 = syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0x35b}, &(0x7f00000000c0)=0x8) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) [ 1657.172485][T29890] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:08 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:08 executing program 2 (fault-call:9 fault-nth:28): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000006c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000036c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1657.578450][T30083] FAULT_INJECTION: forcing a failure. [ 1657.578450][T30083] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.591094][T30083] CPU: 0 PID: 30083 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1657.599089][T30083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1657.609152][T30083] Call Trace: [ 1657.612465][T30083] dump_stack+0x172/0x1f0 [ 1657.616837][T30083] should_fail.cold+0xa/0x15 [ 1657.621444][T30083] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1657.626913][T30083] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1657.632740][T30083] ? mark_held_locks+0xf0/0xf0 [ 1657.637518][T30083] __should_failslab+0x121/0x190 [ 1657.642468][T30083] should_failslab+0x9/0x14 [ 1657.646992][T30083] kmem_cache_alloc_node_trace+0x5a/0x720 [ 1657.652724][T30083] ? rwlock_bug.part.0+0x90/0x90 [ 1657.657666][T30083] ? lock_acquire+0x16f/0x3f0 [ 1657.662354][T30083] ? blkcg_activate_policy+0x14d/0x560 [ 1657.667827][T30083] throtl_pd_alloc+0x8b/0x990 [ 1657.672513][T30083] ? throtl_schedule_next_dispatch+0x640/0x640 [ 1657.678715][T30083] blkcg_activate_policy+0x242/0x560 [ 1657.684073][T30083] blk_throtl_init+0x459/0x680 [ 1657.688854][T30083] blkcg_init_queue+0x277/0x3d0 [ 1657.693718][T30083] blk_alloc_queue_node+0x541/0x760 [ 1657.698937][T30083] blk_mq_init_queue+0x4a/0xb0 [ 1657.703714][T30083] loop_add+0x2dd/0x8d0 [ 1657.707886][T30083] ? idr_find+0x47/0x60 [ 1657.712077][T30083] loop_control_ioctl+0x165/0x360 [ 1657.717127][T30083] ? loop_add+0x8d0/0x8d0 [ 1657.721475][T30083] ? loop_add+0x8d0/0x8d0 [ 1657.725815][T30083] do_vfs_ioctl+0xd6e/0x1390 [ 1657.730414][T30083] ? ioctl_preallocate+0x210/0x210 [ 1657.735534][T30083] ? smack_file_ioctl+0x196/0x310 [ 1657.740560][T30083] ? smack_inode_rename+0x2d0/0x2d0 [ 1657.745779][T30083] ? tomoyo_file_ioctl+0x23/0x30 [ 1657.750729][T30083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1657.756987][T30083] ? security_file_ioctl+0x93/0xc0 [ 1657.762130][T30083] ksys_ioctl+0xab/0xd0 [ 1657.766298][T30083] __x64_sys_ioctl+0x73/0xb0 [ 1657.770899][T30083] do_syscall_64+0x103/0x610 [ 1657.775503][T30083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1657.781396][T30083] RIP: 0033:0x458c29 [ 1657.785297][T30083] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1657.804946][T30083] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1657.813429][T30083] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1657.821442][T30083] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e6f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1657.829735][T30083] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.837728][T30083] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1657.845716][T30083] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r0, &(0x7f0000000440)=""/199, 0xc7) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000000)=""/201) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x24, &(0x7f0000000200)=""/60, &(0x7f0000000240)=0x3c) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000300)='-\x00'], &(0x7f0000000680)=[&(0x7f00000003c0)='\x00', &(0x7f0000000540)='GPL#uservmnet1[,\\vmnet0\x00', &(0x7f0000000580)='user\x00', &(0x7f00000005c0)='bdev\\\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='user\x00']) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 2 (fault-call:9 fault-nth:29): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000007400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:09 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1658.182468][T30144] FAULT_INJECTION: forcing a failure. [ 1658.182468][T30144] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.205828][T30144] CPU: 0 PID: 30144 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1658.213840][T30144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.223910][T30144] Call Trace: [ 1658.227216][T30144] dump_stack+0x172/0x1f0 [ 1658.231565][T30144] should_fail.cold+0xa/0x15 [ 1658.236166][T30144] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1658.241986][T30144] ? ___might_sleep+0x163/0x280 [ 1658.246859][T30144] __should_failslab+0x121/0x190 [ 1658.251976][T30144] should_failslab+0x9/0x14 [ 1658.256489][T30144] kmem_cache_alloc_trace+0x2d1/0x760 [ 1658.261868][T30144] ? throtl_pd_free+0x23/0x30 [ 1658.266550][T30144] ? blkcg_activate_policy+0x6a/0x560 [ 1658.271927][T30144] ? blk_mq_queue_stopped+0x130/0x130 [ 1658.277304][T30144] blk_stat_alloc_callback+0x58/0x270 [ 1658.282679][T30144] ? tg_last_low_overflow_time+0x630/0x630 [ 1658.288485][T30144] ? blk_mq_hctx_mark_pending+0x200/0x200 [ 1658.294210][T30144] blk_mq_init_allocated_queue+0x81/0x14c0 [ 1658.300026][T30144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1658.306375][T30144] ? blkcg_init_queue+0x18a/0x3d0 [ 1658.311428][T30144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1658.317673][T30144] ? blk_alloc_queue_node+0x559/0x760 [ 1658.323064][T30144] blk_mq_init_queue+0x62/0xb0 [ 1658.327840][T30144] loop_add+0x2dd/0x8d0 [ 1658.332017][T30144] ? idr_find+0x47/0x60 [ 1658.336281][T30144] loop_control_ioctl+0x165/0x360 [ 1658.341314][T30144] ? loop_add+0x8d0/0x8d0 [ 1658.345669][T30144] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1658.351137][T30144] ? loop_add+0x8d0/0x8d0 [ 1658.355475][T30144] do_vfs_ioctl+0xd6e/0x1390 [ 1658.360093][T30144] ? ioctl_preallocate+0x210/0x210 [ 1658.365215][T30144] ? retint_kernel+0x2d/0x2d [ 1658.369821][T30144] ? security_file_ioctl+0x3d/0xc0 [ 1658.374942][T30144] ? security_file_ioctl+0x4e/0xc0 [ 1658.380076][T30144] ? security_file_ioctl+0x93/0xc0 [ 1658.385221][T30144] ksys_ioctl+0xab/0xd0 [ 1658.389384][T30144] __x64_sys_ioctl+0x73/0xb0 [ 1658.394001][T30144] do_syscall_64+0x103/0x610 [ 1658.398610][T30144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1658.404509][T30144] RIP: 0033:0x458c29 [ 1658.408410][T30144] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:26:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_setup(0x100000001, &(0x7f0000000000)) io_setup(0x7, &(0x7f0000000040)=0x0) io_destroy(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) [ 1658.428022][T30144] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.436544][T30144] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1658.444522][T30144] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1658.452491][T30144] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1658.460477][T30144] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1658.468450][T30144] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 2 (fault-call:9 fault-nth:30): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x1}, 0xb) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000480)='\x00', 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="52d260ffffd896e200abdb22566a57039b02ca9b2dafeda873e5ad8ff10812608b7d8994f8d18470eb8cf3c7cf249ec146382cae27be6e75ff2244b571231b2efbf2b537cc3cc80b1b5b23b13d914ef483d55cb0ac23daab334edb167aab4b5f0d73dc7295ed872be5d2bffda659d4b2b8ef35e5b5144f8e5576f1ebe7231c4563462c7b4806861266de82eb395168f6c91ac4af47b1e4e67c465a7f3a904f3d404c318c845558dae049d63826ffbde15e86cc6d209802862a3992e49af48dc02326838fd49c6f2d8faa67782ceafcae57e0e16104790fd15add9916dbffc9fc3bc3a1c3b7d6b295a0ba604575cd87e7bfe340f3"], 0x0) keyctl$update(0x2, r2, &(0x7f0000000000)="e3de3dd0a67de7d463194ff4a669f8aed5e01dc25ac29cc6de09e5a5f1", 0x1d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xc4d, 0x400) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r4) [ 1658.586274][T30243] FAULT_INJECTION: forcing a failure. [ 1658.586274][T30243] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.629953][T30243] CPU: 1 PID: 30243 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1658.637971][T30243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.648051][T30243] Call Trace: [ 1658.651372][T30243] dump_stack+0x172/0x1f0 [ 1658.655720][T30243] should_fail.cold+0xa/0x15 [ 1658.660324][T30243] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1658.666147][T30243] ? ___might_sleep+0x163/0x280 [ 1658.671021][T30243] __should_failslab+0x121/0x190 [ 1658.675977][T30243] should_failslab+0x9/0x14 [ 1658.680490][T30243] kmem_cache_alloc_node_trace+0x270/0x720 [ 1658.686308][T30243] ? find_next_bit+0x107/0x130 [ 1658.691103][T30243] __kmalloc_node+0x3d/0x70 [ 1658.695621][T30243] blk_mq_init_allocated_queue+0x3c6/0x14c0 [ 1658.701546][T30243] ? blkcg_init_queue+0x185/0x3d0 [ 1658.706589][T30243] ? blkcg_init_queue+0x18a/0x3d0 [ 1658.711641][T30243] blk_mq_init_queue+0x62/0xb0 [ 1658.716425][T30243] loop_add+0x2dd/0x8d0 [ 1658.720592][T30243] ? idr_find+0x47/0x60 [ 1658.724759][T30243] loop_control_ioctl+0x165/0x360 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1658.729793][T30243] ? loop_add+0x8d0/0x8d0 [ 1658.734133][T30243] ? loop_add+0x8d0/0x8d0 [ 1658.738477][T30243] do_vfs_ioctl+0xd6e/0x1390 [ 1658.743091][T30243] ? ioctl_preallocate+0x210/0x210 [ 1658.748208][T30243] ? smack_file_ioctl+0x196/0x310 [ 1658.753434][T30243] ? smack_inode_rename+0x2d0/0x2d0 [ 1658.758668][T30243] ? tomoyo_file_ioctl+0x23/0x30 [ 1658.763616][T30243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1658.769875][T30243] ? security_file_ioctl+0x93/0xc0 [ 1658.775005][T30243] ksys_ioctl+0xab/0xd0 [ 1658.779196][T30243] __x64_sys_ioctl+0x73/0xb0 [ 1658.783798][T30243] do_syscall_64+0x103/0x610 [ 1658.788409][T30243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1658.794312][T30243] RIP: 0033:0x458c29 [ 1658.798214][T30243] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1658.817823][T30243] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.826261][T30243] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1658.834253][T30243] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1658.842231][T30243] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1658.850205][T30243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1658.858186][T30243] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 2 (fault-call:9 fault-nth:31): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000007a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x614000) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(r2, 0x0, 0xfffffffffffffdb5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x4, 0xd6d8, 0x4, 0x7, 0x1ba, 0xfa4800000}) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1659.086851][T30332] FAULT_INJECTION: forcing a failure. [ 1659.086851][T30332] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.129733][T30332] CPU: 0 PID: 30332 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1659.137761][T30332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.147833][T30332] Call Trace: [ 1659.151156][T30332] dump_stack+0x172/0x1f0 [ 1659.155511][T30332] should_fail.cold+0xa/0x15 [ 1659.160115][T30332] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1659.165935][T30332] ? ___might_sleep+0x163/0x280 [ 1659.170796][T30332] __should_failslab+0x121/0x190 [ 1659.175745][T30332] should_failslab+0x9/0x14 [ 1659.180260][T30332] kmem_cache_alloc_node_trace+0x270/0x720 [ 1659.186094][T30332] ? find_next_bit+0x107/0x130 [ 1659.190876][T30332] __kmalloc_node+0x3d/0x70 [ 1659.195390][T30332] blk_mq_realloc_hw_ctxs+0x1a0/0xfa0 [ 1659.200775][T30332] ? kasan_unpoison_shadow+0x35/0x50 [ 1659.206090][T30332] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1659.211924][T30332] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1659.217923][T30332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1659.224279][T30332] ? blkcg_init_queue+0x18a/0x3d0 [ 1659.229320][T30332] blk_mq_init_queue+0x62/0xb0 [ 1659.234448][T30332] loop_add+0x2dd/0x8d0 [ 1659.238619][T30332] ? idr_find+0x47/0x60 [ 1659.242793][T30332] loop_control_ioctl+0x165/0x360 [ 1659.247842][T30332] ? loop_add+0x8d0/0x8d0 [ 1659.252195][T30332] ? loop_add+0x8d0/0x8d0 [ 1659.256537][T30332] do_vfs_ioctl+0xd6e/0x1390 [ 1659.261139][T30332] ? ioctl_preallocate+0x210/0x210 [ 1659.266255][T30332] ? smack_file_ioctl+0x196/0x310 [ 1659.271290][T30332] ? smack_inode_rename+0x2d0/0x2d0 [ 1659.276510][T30332] ? tomoyo_file_ioctl+0x23/0x30 [ 1659.281462][T30332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1659.287719][T30332] ? security_file_ioctl+0x93/0xc0 [ 1659.292841][T30332] ksys_ioctl+0xab/0xd0 [ 1659.297099][T30332] __x64_sys_ioctl+0x73/0xb0 [ 1659.301712][T30332] do_syscall_64+0x103/0x610 [ 1659.306322][T30332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1659.312219][T30332] RIP: 0033:0x458c29 [ 1659.316130][T30332] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1659.335768][T30332] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.344220][T30332] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1659.352214][T30332] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1659.360196][T30332] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1659.368551][T30332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000027c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:10 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e7f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000008000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1659.376540][T30332] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:11 executing program 2 (fault-call:9 fault-nth:32): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1659.754167][T30467] FAULT_INJECTION: forcing a failure. [ 1659.754167][T30467] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.796301][T30467] CPU: 1 PID: 30467 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1659.804331][T30467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.814387][T30467] Call Trace: [ 1659.817717][T30467] dump_stack+0x172/0x1f0 [ 1659.822078][T30467] should_fail.cold+0xa/0x15 [ 1659.826687][T30467] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1659.832507][T30467] ? ___might_sleep+0x163/0x280 [ 1659.837367][T30467] __should_failslab+0x121/0x190 [ 1659.842321][T30467] should_failslab+0x9/0x14 [ 1659.846840][T30467] kmem_cache_alloc_node_trace+0x270/0x720 [ 1659.852673][T30467] ? lock_downgrade+0x880/0x880 [ 1659.857541][T30467] __kmalloc_node+0x3d/0x70 [ 1659.862084][T30467] blk_mq_realloc_hw_ctxs+0x4c5/0xfa0 [ 1659.867463][T30467] ? kasan_unpoison_shadow+0x35/0x50 [ 1659.872769][T30467] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1659.878685][T30467] blk_mq_init_queue+0x62/0xb0 [ 1659.883455][T30467] loop_add+0x2dd/0x8d0 [ 1659.887614][T30467] ? idr_find+0x47/0x60 [ 1659.891780][T30467] loop_control_ioctl+0x165/0x360 [ 1659.896807][T30467] ? loop_add+0x8d0/0x8d0 [ 1659.901155][T30467] ? loop_add+0x8d0/0x8d0 [ 1659.914648][T30467] do_vfs_ioctl+0xd6e/0x1390 [ 1659.919261][T30467] ? ioctl_preallocate+0x210/0x210 [ 1659.924379][T30467] ? smack_file_ioctl+0x196/0x310 [ 1659.929414][T30467] ? smack_inode_rename+0x2d0/0x2d0 [ 1659.934632][T30467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1659.940105][T30467] ? tomoyo_file_ioctl+0x23/0x30 [ 1659.945053][T30467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1659.951304][T30467] ? security_file_ioctl+0x93/0xc0 [ 1659.956427][T30467] ksys_ioctl+0xab/0xd0 [ 1659.961399][T30467] __x64_sys_ioctl+0x73/0xb0 [ 1659.966000][T30467] do_syscall_64+0x103/0x610 [ 1659.970608][T30467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1659.976501][T30467] RIP: 0033:0x458c29 [ 1659.983268][T30467] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1660.002875][T30467] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1660.011291][T30467] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1660.019263][T30467] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1660.027232][T30467] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1660.035292][T30467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 17:26:11 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x80080) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x4004) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0xfffffffffffffff7}]}, 0xc, 0x2) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1660.043263][T30467] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @loopback, r3}, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) 17:26:11 executing program 2 (fault-call:9 fault-nth:33): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:11 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1660.216716][T30495] FAULT_INJECTION: forcing a failure. [ 1660.216716][T30495] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.236070][T30495] CPU: 1 PID: 30495 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1660.244069][T30495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.254129][T30495] Call Trace: [ 1660.257437][T30495] dump_stack+0x172/0x1f0 [ 1660.261785][T30495] should_fail.cold+0xa/0x15 [ 1660.266390][T30495] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1660.272298][T30495] ? ___might_sleep+0x163/0x280 [ 1660.277170][T30495] __should_failslab+0x121/0x190 [ 1660.282393][T30495] should_failslab+0x9/0x14 [ 1660.286906][T30495] kmem_cache_alloc_node_trace+0x270/0x720 [ 1660.292716][T30495] ? lock_downgrade+0x880/0x880 [ 1660.297592][T30495] __kmalloc_node+0x3d/0x70 [ 1660.302102][T30495] blk_mq_realloc_hw_ctxs+0x4c5/0xfa0 [ 1660.307594][T30495] ? kasan_unpoison_shadow+0x35/0x50 [ 1660.313081][T30495] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1660.319157][T30495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1660.325404][T30495] ? blkcg_init_queue+0x18a/0x3d0 [ 1660.330440][T30495] blk_mq_init_queue+0x62/0xb0 [ 1660.335223][T30495] loop_add+0x2dd/0x8d0 [ 1660.339381][T30495] ? idr_find+0x47/0x60 [ 1660.343547][T30495] loop_control_ioctl+0x165/0x360 [ 1660.348583][T30495] ? loop_add+0x8d0/0x8d0 [ 1660.352918][T30495] ? loop_add+0x8d0/0x8d0 [ 1660.357253][T30495] do_vfs_ioctl+0xd6e/0x1390 [ 1660.361853][T30495] ? ioctl_preallocate+0x210/0x210 [ 1660.366961][T30495] ? smack_file_ioctl+0x196/0x310 [ 1660.371984][T30495] ? smack_inode_rename+0x2d0/0x2d0 [ 1660.377201][T30495] ? tomoyo_file_ioctl+0x23/0x30 [ 1660.382149][T30495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1660.388400][T30495] ? security_file_ioctl+0x93/0xc0 [ 1660.393524][T30495] ksys_ioctl+0xab/0xd0 [ 1660.397783][T30495] __x64_sys_ioctl+0x73/0xb0 [ 1660.402466][T30495] do_syscall_64+0x103/0x610 [ 1660.407067][T30495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1660.412961][T30495] RIP: 0033:0x458c29 [ 1660.416857][T30495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1660.436467][T30495] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1660.444902][T30495] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1660.452873][T30495] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1660.460843][T30495] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1660.468819][T30495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1660.476788][T30495] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:12 executing program 2 (fault-call:9 fault-nth:34): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x40000000000, @local, 'team_slave_0\x00'}}, 0xd) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1660.657981][T30502] FAULT_INJECTION: forcing a failure. [ 1660.657981][T30502] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.677543][T30502] CPU: 0 PID: 30502 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1660.685540][T30502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1660.695619][T30502] Call Trace: [ 1660.698920][T30502] dump_stack+0x172/0x1f0 [ 1660.703258][T30502] should_fail.cold+0xa/0x15 [ 1660.707853][T30502] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1660.713668][T30502] ? ___might_sleep+0x163/0x280 [ 1660.718521][T30502] __should_failslab+0x121/0x190 [ 1660.723646][T30502] should_failslab+0x9/0x14 [ 1660.728234][T30502] kmem_cache_alloc_node_trace+0x270/0x720 [ 1660.734036][T30502] ? retint_kernel+0x2d/0x2d [ 1660.738647][T30502] blk_alloc_flush_queue+0x8f/0x2d0 [ 1660.743846][T30502] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 1660.749222][T30502] ? kasan_unpoison_shadow+0x35/0x50 [ 1660.754516][T30502] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1660.760410][T30502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1660.766649][T30502] ? blkcg_init_queue+0x18a/0x3d0 [ 1660.771683][T30502] blk_mq_init_queue+0x62/0xb0 [ 1660.776454][T30502] loop_add+0x2dd/0x8d0 [ 1660.780606][T30502] ? idr_find+0x47/0x60 [ 1660.784763][T30502] loop_control_ioctl+0x165/0x360 [ 1660.789783][T30502] ? loop_add+0x8d0/0x8d0 [ 1660.794126][T30502] ? loop_add+0x8d0/0x8d0 [ 1660.798459][T30502] do_vfs_ioctl+0xd6e/0x1390 [ 1660.803064][T30502] ? ioctl_preallocate+0x210/0x210 [ 1660.808170][T30502] ? smack_file_ioctl+0x196/0x310 [ 1660.813202][T30502] ? smack_inode_rename+0x2d0/0x2d0 [ 1660.818406][T30502] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1660.823872][T30502] ? tomoyo_file_ioctl+0x23/0x30 [ 1660.828805][T30502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1660.835060][T30502] ? security_file_ioctl+0x93/0xc0 [ 1660.840178][T30502] ksys_ioctl+0xab/0xd0 [ 1660.844336][T30502] __x64_sys_ioctl+0x73/0xb0 [ 1660.848934][T30502] do_syscall_64+0x103/0x610 [ 1660.853524][T30502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1660.859419][T30502] RIP: 0033:0x458c29 [ 1660.863314][T30502] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1660.882910][T30502] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1660.891318][T30502] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1660.899281][T30502] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1660.907246][T30502] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1660.915213][T30502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1660.923177][T30502] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl(r0, 0x10001, &(0x7f0000000000)="bf36d71d4b9ec68ecce6ecb9a1df01616801da39e1b8dff88a9a1000d358ab6c425da3a698a5c4b7") syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) syslog(0x9, &(0x7f00000000c0)=""/15, 0xf) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:12 executing program 2 (fault-call:9 fault-nth:35): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:12 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000038c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='\xe9pu/syz0\'\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x16\x95\x1d7 \xdf\xf8\xb7\xdd\xbaZ.\xfaj\x7fl\xc6)\xb7\x97(\xbe`A\vA\x19\xbcL\xd5\x84\x9f,Q\bVW=I\x90\x95M\xc5\xbd\x95)\xce\xdend}cA\xb0-\xcd\xaaO\"9g\x0fAi\x13\xc9G\xd8*\x9a\xaa7+\xf1\x056{\x8bS\xa1\xb9\xecu\x9d\n\xa9\xd7\x98e\x9a\x1fM\x11)\xd6\x13\xe7\x81\x93/\xe0=\x01\xffT/\x15m.\b`[\'VP\x1cdD\xdd\'\xd3h^\xd3\xed\xf9N\xb5\xbb\xaa\xd4O\x16\xb2\xdb\x9eo^`#\x1fI\xa4\xb2h\x0e\xb5\xc9\x1b\x94\x8dn\xb7\x88w\t\xc7\xb8\x0e\x1c\xdb\xec\x06\x9e\xa5\xe2u/\xa3aP\x14)\xbc\xa4\x01\x00\x00\x00\x00\x00\x00\x00\xe3\xbf/\xe3\x91\x92q\x84\xb1Y+\xf6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=|\xa3\xfe\xeb\xaf\b\xb6\x1e\xf3\x91y\'\xa2n\xb7TYQ\xb2\x9fu\x1f\xf13}\xc6\x96D\xf3\x868/C\x85\xa2\x109m\xe1\'B\xd1tTmv\xb7Q\x1bEm\xda\n\x99\xa5%W\xaaM\xe5\x7f\xa6\xea,$\xe0d\f\x03\xb7\xa0\xf6\xd4\xbaH\xfcwf\x0f\xe2\x06`\xfc\x13\x99\xeeT\xebF6\r\xaa\xdb\x02\x81\xbb\xf6\x04\x1eN^\xb1\xb6\xc5\xfd\x03\xf8:S\xab\x9e|\xf2\xb3d\x05\x96L\xe3\xe7\b\x83;S\xa7?\xde\xee\xb4\xd0\x84\x05\x1b\x15\x89\xe7\xf0<\x1ajq', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xfffffd5d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000ffffff8c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1661.782263][T30729] FAULT_INJECTION: forcing a failure. [ 1661.782263][T30729] name failslab, interval 1, probability 0, space 0, times 0 17:26:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02042abd7000fbdbdf2515000000600001001c00020008000200ffffffff080003001f0000000800010013000000180001006574683a76657468315f746f5f626f6e64000000100001006574683a69701767726530001000010069623a62637366300000000008000300ff000000100004000c00010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setitimer(0x0, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280)) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 1661.827995][T30729] CPU: 0 PID: 30729 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1661.836120][T30729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1661.846182][T30729] Call Trace: [ 1661.849496][T30729] dump_stack+0x172/0x1f0 [ 1661.854021][T30729] should_fail.cold+0xa/0x15 [ 1661.858645][T30729] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1661.864470][T30729] ? ___might_sleep+0x163/0x280 [ 1661.869335][T30729] __should_failslab+0x121/0x190 [ 1661.874286][T30729] should_failslab+0x9/0x14 [ 1661.878804][T30729] kmem_cache_alloc_node_trace+0x270/0x720 [ 1661.884711][T30729] ? llc_conn_ac_dec_tx_win_size+0xb0/0xe0 [ 1661.890531][T30729] ? __kmalloc_node+0x3d/0x70 [ 1661.895224][T30729] __kmalloc_node+0x3d/0x70 [ 1661.899746][T30729] sbitmap_init_node+0x29e/0x510 [ 1661.904786][T30729] blk_mq_realloc_hw_ctxs+0x53b/0xfa0 [ 1661.910164][T30729] ? kasan_unpoison_shadow+0x35/0x50 [ 1661.915473][T30729] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1661.921377][T30729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1661.927630][T30729] ? blkcg_init_queue+0x18a/0x3d0 [ 1661.932672][T30729] blk_mq_init_queue+0x62/0xb0 [ 1661.937450][T30729] loop_add+0x2dd/0x8d0 [ 1661.941618][T30729] ? idr_find+0x47/0x60 [ 1661.945783][T30729] loop_control_ioctl+0x165/0x360 [ 1661.950823][T30729] ? loop_add+0x8d0/0x8d0 [ 1661.955167][T30729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1661.962139][T30729] ? loop_add+0x8d0/0x8d0 [ 1661.966492][T30729] do_vfs_ioctl+0xd6e/0x1390 [ 1661.971106][T30729] ? ioctl_preallocate+0x210/0x210 17:26:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) [ 1661.976235][T30729] ? retint_kernel+0x2d/0x2d [ 1661.980862][T30729] ? security_file_ioctl+0x3d/0xc0 [ 1661.985988][T30729] ? security_file_ioctl+0x4e/0xc0 [ 1661.991114][T30729] ? security_file_ioctl+0x93/0xc0 [ 1661.996244][T30729] ksys_ioctl+0xab/0xd0 [ 1662.000411][T30729] __x64_sys_ioctl+0x73/0xb0 [ 1662.005010][T30729] do_syscall_64+0x103/0x610 [ 1662.009633][T30729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1662.015550][T30729] RIP: 0033:0x458c29 [ 1662.019451][T30729] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1662.039170][T30729] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.047595][T30729] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1662.055574][T30729] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.063552][T30729] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1662.071523][T30729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e8f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1662.079495][T30729] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:13 executing program 2 (fault-call:9 fault-nth:36): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:13 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1662.416100][T31033] FAULT_INJECTION: forcing a failure. [ 1662.416100][T31033] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.443271][T31033] CPU: 1 PID: 31033 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1662.451285][T31033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.461345][T31033] Call Trace: [ 1662.464655][T31033] dump_stack+0x172/0x1f0 [ 1662.469001][T31033] should_fail.cold+0xa/0x15 [ 1662.473618][T31033] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1662.479441][T31033] ? ___might_sleep+0x163/0x280 [ 1662.484302][T31033] __should_failslab+0x121/0x190 [ 1662.489247][T31033] should_failslab+0x9/0x14 [ 1662.493758][T31033] kmem_cache_alloc_node_trace+0x270/0x720 [ 1662.499577][T31033] ? __kmalloc_node+0x3d/0x70 [ 1662.504264][T31033] __kmalloc_node+0x3d/0x70 [ 1662.508799][T31033] sbitmap_init_node+0x29e/0x510 [ 1662.513778][T31033] blk_mq_realloc_hw_ctxs+0x53b/0xfa0 [ 1662.519166][T31033] ? kasan_unpoison_shadow+0x35/0x50 [ 1662.524472][T31033] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1662.530375][T31033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1662.536622][T31033] ? blkcg_init_queue+0x18a/0x3d0 [ 1662.541663][T31033] blk_mq_init_queue+0x62/0xb0 [ 1662.546433][T31033] loop_add+0x2dd/0x8d0 [ 1662.550597][T31033] ? idr_find+0x47/0x60 [ 1662.554761][T31033] loop_control_ioctl+0x165/0x360 [ 1662.559800][T31033] ? loop_add+0x8d0/0x8d0 [ 1662.564177][T31033] ? loop_add+0x8d0/0x8d0 [ 1662.568522][T31033] do_vfs_ioctl+0xd6e/0x1390 [ 1662.573126][T31033] ? ioctl_preallocate+0x210/0x210 [ 1662.578240][T31033] ? smack_file_ioctl+0x196/0x310 [ 1662.583269][T31033] ? smack_inode_rename+0x2d0/0x2d0 [ 1662.588663][T31033] ? tomoyo_file_ioctl+0x23/0x30 [ 1662.593608][T31033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1662.599865][T31033] ? security_file_ioctl+0x93/0xc0 [ 1662.604999][T31033] ksys_ioctl+0xab/0xd0 [ 1662.609167][T31033] __x64_sys_ioctl+0x73/0xb0 [ 1662.613764][T31033] do_syscall_64+0x103/0x610 [ 1662.618368][T31033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1662.624262][T31033] RIP: 0033:0x458c29 [ 1662.628184][T31033] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1662.647798][T31033] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.656218][T31033] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 17:26:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="58f668737de01de6ef5f89e50abefc40380cde8e538f28f8aa575cea0eca34a7871dd6a86757078845500b36264b1d8bfefdbe9a50ee081c269c86fcef65de52713661ebecb39346c9a4596341eff2dcbfd5", 0x52}, {&(0x7f0000000080)="7f686bfadfa8619792c079db9c3065529a1943f584014aa7b745db756e6c9f86426de5835281306faa2c8808a0f4768c4ad6d988270ad6e2297023bbf899e213f06b02857ffa305113b65c596be67fd57f622146f1daa38815e188de0f2f4c5446887a88982048cc03eb3ebe3bc098b22aef73f4ff7b270619632625f40fd7baf892282d613f0a389412ad4fe90e9af93b3bb7229e5131e5bb04d3f8835b447c288d8697329915c34e", 0xa9}, {&(0x7f0000000200)="6e0b326f452f595bfbc791c50b471e05bcfcffbf61c825692ab23125e8acb111bd11f9a3dc761935c5c1cd89d8a72c2fdb8868a75f682c7a2df3efb62d6fe85a86129c", 0x43}, {&(0x7f0000000140)="a9e4acd6a84fa9583b9b96a21832bfbb713c80cdda5e81d2cfa5e0faab8546026976c989c7c0ef032b74e694290cb6bf20a97a423eb269", 0x37}, {&(0x7f0000000280)="a108d22f99a0525d6366fa0823", 0xd}], 0x5, 0x7) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1662.664203][T31033] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1662.672176][T31033] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1662.680151][T31033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1662.688123][T31033] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:14 executing program 2 (fault-call:9 fault-nth:37): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1662.798111][T31056] FAULT_INJECTION: forcing a failure. [ 1662.798111][T31056] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.818272][T31056] CPU: 0 PID: 31056 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1662.826305][T31056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1662.836380][T31056] Call Trace: [ 1662.839690][T31056] dump_stack+0x172/0x1f0 [ 1662.844037][T31056] should_fail.cold+0xa/0x15 [ 1662.848665][T31056] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1662.854499][T31056] ? ___might_sleep+0x163/0x280 [ 1662.859675][T31056] __should_failslab+0x121/0x190 [ 1662.864640][T31056] should_failslab+0x9/0x14 [ 1662.869335][T31056] kmem_cache_alloc_node_trace+0x270/0x720 [ 1662.875157][T31056] ? rcu_read_lock_sched_held+0x110/0x130 [ 1662.880886][T31056] ? kmem_cache_alloc_node_trace+0x352/0x720 [ 1662.886879][T31056] __kmalloc_node+0x3d/0x70 [ 1662.891423][T31056] blk_alloc_flush_queue+0x102/0x2d0 [ 1662.896734][T31056] blk_mq_realloc_hw_ctxs+0x732/0xfa0 [ 1662.902314][T31056] blk_mq_init_allocated_queue+0x406/0x14c0 [ 1662.912954][T31056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1662.919237][T31056] ? blkcg_init_queue+0x18a/0x3d0 [ 1662.924298][T31056] blk_mq_init_queue+0x62/0xb0 [ 1662.929102][T31056] loop_add+0x2dd/0x8d0 [ 1662.933281][T31056] ? idr_find+0x47/0x60 [ 1662.937452][T31056] loop_control_ioctl+0x165/0x360 [ 1662.942487][T31056] ? loop_add+0x8d0/0x8d0 [ 1662.946830][T31056] ? loop_add+0x8d0/0x8d0 [ 1662.951179][T31056] do_vfs_ioctl+0xd6e/0x1390 [ 1662.955797][T31056] ? ioctl_preallocate+0x210/0x210 [ 1662.960915][T31056] ? smack_file_ioctl+0x196/0x310 [ 1662.966133][T31056] ? smack_inode_rename+0x2d0/0x2d0 [ 1662.971356][T31056] ? tomoyo_file_ioctl+0x23/0x30 [ 1662.976337][T31056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1662.982594][T31056] ? security_file_ioctl+0x93/0xc0 [ 1662.987720][T31056] ksys_ioctl+0xab/0xd0 [ 1662.991954][T31056] __x64_sys_ioctl+0x73/0xb0 [ 1662.996576][T31056] do_syscall_64+0x103/0x610 [ 1663.001365][T31056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1663.007348][T31056] RIP: 0033:0x458c29 [ 1663.011271][T31056] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1663.031072][T31056] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.039520][T31056] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1663.047852][T31056] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1663.055830][T31056] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1663.063826][T31056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1663.071826][T31056] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:14 executing program 2 (fault-call:9 fault-nth:38): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:14 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1663.446548][T31232] FAULT_INJECTION: forcing a failure. [ 1663.446548][T31232] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.528838][T31232] CPU: 1 PID: 31232 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1663.536893][T31232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.546973][T31232] Call Trace: [ 1663.550376][T31232] dump_stack+0x172/0x1f0 [ 1663.554726][T31232] should_fail.cold+0xa/0x15 [ 1663.559339][T31232] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1663.565162][T31232] ? ___might_sleep+0x163/0x280 [ 1663.570079][T31232] __should_failslab+0x121/0x190 [ 1663.575063][T31232] should_failslab+0x9/0x14 [ 1663.579587][T31232] kmem_cache_alloc_node_trace+0x270/0x720 [ 1663.585403][T31232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1663.591132][T31232] ? find_next_bit+0x107/0x130 [ 1663.595909][T31232] sbitmap_queue_init_node+0x29e/0x710 [ 1663.601389][T31232] blk_mq_init_tags+0x119/0x2c0 [ 1663.606253][T31232] blk_mq_alloc_rq_map+0x88/0x200 [ 1663.611289][T31232] blk_mq_init_sched+0x20c/0x750 [ 1663.616372][T31232] elevator_init_mq+0xcd/0x160 [ 1663.621158][T31232] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1663.627166][T31232] blk_mq_init_queue+0x62/0xb0 [ 1663.631946][T31232] loop_add+0x2dd/0x8d0 [ 1663.636114][T31232] ? idr_find+0x47/0x60 [ 1663.640341][T31232] loop_control_ioctl+0x165/0x360 [ 1663.645373][T31232] ? loop_add+0x8d0/0x8d0 [ 1663.649716][T31232] ? loop_add+0x8d0/0x8d0 [ 1663.654066][T31232] do_vfs_ioctl+0xd6e/0x1390 [ 1663.658675][T31232] ? ioctl_preallocate+0x210/0x210 [ 1663.663799][T31232] ? smack_file_ioctl+0x196/0x310 [ 1663.668832][T31232] ? smack_inode_rename+0x2d0/0x2d0 [ 1663.674088][T31232] ? tomoyo_file_ioctl+0x23/0x30 [ 1663.679057][T31232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1663.685330][T31232] ? security_file_ioctl+0x93/0xc0 [ 1663.690463][T31232] ksys_ioctl+0xab/0xd0 [ 1663.694639][T31232] __x64_sys_ioctl+0x73/0xb0 [ 1663.699247][T31232] do_syscall_64+0x103/0x610 [ 1663.703863][T31232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1663.709942][T31232] RIP: 0033:0x458c29 [ 1663.713877][T31232] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1663.733761][T31232] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.742242][T31232] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1663.750317][T31232] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1663.758303][T31232] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.766294][T31232] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 17:26:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "5a35cb93a809deb371be7f06b863fa2f"}, 0x11, 0x2) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1663.774281][T31232] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9a00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9b00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 2 (fault-call:9 fault-nth:39): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9c00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9d00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9e00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x22e0000, 0x2, 0x604e, 0x20, 0x0, 0x8, 0x20, 0x1, 0x0, 0x0, 0x10000, 0x3, 0x7, 0x5, 0x8000, 0x1, 0x0, 0x7fff, 0xffffffffffffffc1, 0x1, 0x7fffffff, 0x9, 0x6, 0x5646, 0x5, 0x1, 0x10001, 0x7fffffff, 0x7, 0x100, 0x5, 0x6, 0x1, 0x10001, 0x5, 0x7, 0x0, 0x1, 0x3, @perf_config_ext={0x1, 0x80000001}, 0x1000, 0x9, 0x2, 0x0, 0x3, 0xfffffffffffffffd, 0xbb}, r1, 0x4, r0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0)={{0x92ff, 0x2}, 0x3c}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:26:15 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010e9f00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1664.218895][T31422] FAULT_INJECTION: forcing a failure. [ 1664.218895][T31422] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.249845][T31422] CPU: 1 PID: 31422 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1664.257893][T31422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.267972][T31422] Call Trace: [ 1664.271301][T31422] dump_stack+0x172/0x1f0 [ 1664.275835][T31422] should_fail.cold+0xa/0x15 [ 1664.280474][T31422] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1664.286303][T31422] ? ___might_sleep+0x163/0x280 [ 1664.291188][T31422] __should_failslab+0x121/0x190 [ 1664.296145][T31422] should_failslab+0x9/0x14 [ 1664.300674][T31422] kmem_cache_alloc_node_trace+0x270/0x720 [ 1664.306497][T31422] ? retint_kernel+0x2d/0x2d [ 1664.311112][T31422] __kmalloc_node+0x3d/0x70 [ 1664.315629][T31422] sbitmap_init_node+0x29e/0x510 [ 1664.320609][T31422] sbitmap_queue_init_node+0x40/0x710 [ 1664.325992][T31422] ? find_next_bit+0x107/0x130 [ 1664.330779][T31422] blk_mq_init_tags+0x119/0x2c0 [ 1664.335660][T31422] blk_mq_alloc_rq_map+0x88/0x200 [ 1664.340707][T31422] blk_mq_init_sched+0x20c/0x750 [ 1664.345673][T31422] elevator_init_mq+0xcd/0x160 [ 1664.350460][T31422] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1664.356462][T31422] blk_mq_init_queue+0x62/0xb0 [ 1664.361241][T31422] loop_add+0x2dd/0x8d0 [ 1664.365407][T31422] ? idr_find+0x47/0x60 [ 1664.369595][T31422] loop_control_ioctl+0x165/0x360 [ 1664.374636][T31422] ? loop_add+0x8d0/0x8d0 [ 1664.378982][T31422] ? loop_add+0x8d0/0x8d0 [ 1664.383329][T31422] do_vfs_ioctl+0xd6e/0x1390 [ 1664.387941][T31422] ? ioctl_preallocate+0x210/0x210 [ 1664.393078][T31422] ? retint_kernel+0x2d/0x2d [ 1664.397775][T31422] ? tomoyo_path_chmod+0x30/0x30 [ 1664.402727][T31422] ? tomoyo_file_ioctl+0x23/0x30 [ 1664.407673][T31422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1664.413934][T31422] ? security_file_ioctl+0x93/0xc0 [ 1664.419073][T31422] ksys_ioctl+0xab/0xd0 [ 1664.423248][T31422] __x64_sys_ioctl+0x73/0xb0 [ 1664.427856][T31422] do_syscall_64+0x103/0x610 [ 1664.432468][T31422] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.438369][T31422] RIP: 0033:0x458c29 [ 1664.442275][T31422] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1664.461893][T31422] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:26:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_setup(0xc612, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000040)=0x0) io_destroy(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1664.470333][T31422] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1664.478347][T31422] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1664.486328][T31422] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.494309][T31422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1664.502289][T31422] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:16 executing program 2 (fault-call:9 fault-nth:40): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1664.682827][T31506] FAULT_INJECTION: forcing a failure. [ 1664.682827][T31506] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.718131][T31506] CPU: 1 PID: 31506 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1664.726175][T31506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.736421][T31506] Call Trace: [ 1664.739738][T31506] dump_stack+0x172/0x1f0 [ 1664.744100][T31506] should_fail.cold+0xa/0x15 [ 1664.748825][T31506] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1664.754678][T31506] ? ___might_sleep+0x163/0x280 [ 1664.759552][T31506] __should_failslab+0x121/0x190 [ 1664.764508][T31506] should_failslab+0x9/0x14 [ 1664.769033][T31506] kmem_cache_alloc_node_trace+0x270/0x720 [ 1664.774877][T31506] __kmalloc_node+0x3d/0x70 [ 1664.779401][T31506] sbitmap_init_node+0x29e/0x510 [ 1664.784363][T31506] sbitmap_queue_init_node+0x40/0x710 [ 1664.789748][T31506] ? find_next_bit+0x107/0x130 [ 1664.794524][T31506] blk_mq_init_tags+0x119/0x2c0 [ 1664.799399][T31506] blk_mq_alloc_rq_map+0x88/0x200 [ 1664.804440][T31506] blk_mq_init_sched+0x20c/0x750 [ 1664.809402][T31506] elevator_init_mq+0xcd/0x160 [ 1664.814180][T31506] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1664.820183][T31506] blk_mq_init_queue+0x62/0xb0 [ 1664.825054][T31506] loop_add+0x2dd/0x8d0 [ 1664.829223][T31506] ? idr_find+0x47/0x60 [ 1664.833393][T31506] loop_control_ioctl+0x165/0x360 [ 1664.838434][T31506] ? loop_add+0x8d0/0x8d0 [ 1664.842783][T31506] ? loop_add+0x8d0/0x8d0 [ 1664.847215][T31506] do_vfs_ioctl+0xd6e/0x1390 [ 1664.851819][T31506] ? ioctl_preallocate+0x210/0x210 [ 1664.856936][T31506] ? smack_file_ioctl+0x196/0x310 [ 1664.861969][T31506] ? smack_inode_rename+0x2d0/0x2d0 [ 1664.867188][T31506] ? tomoyo_file_ioctl+0x23/0x30 [ 1664.872139][T31506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1664.878405][T31506] ? security_file_ioctl+0x93/0xc0 [ 1664.883536][T31506] ksys_ioctl+0xab/0xd0 [ 1664.887715][T31506] __x64_sys_ioctl+0x73/0xb0 [ 1664.892316][T31506] do_syscall_64+0x103/0x610 [ 1664.896924][T31506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1664.902821][T31506] RIP: 0033:0x458c29 [ 1664.906809][T31506] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1664.926457][T31506] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1664.934889][T31506] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1664.942875][T31506] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1664.950949][T31506] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1664.958937][T31506] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1664.966941][T31506] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:16 executing program 2 (fault-call:9 fault-nth:41): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1665.205064][T31556] FAULT_INJECTION: forcing a failure. [ 1665.205064][T31556] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.238187][T31556] CPU: 0 PID: 31556 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 17:26:16 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1665.246214][T31556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.256286][T31556] Call Trace: [ 1665.259599][T31556] dump_stack+0x172/0x1f0 [ 1665.263951][T31556] should_fail.cold+0xa/0x15 [ 1665.268561][T31556] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1665.274384][T31556] ? ___might_sleep+0x163/0x280 [ 1665.279260][T31556] __should_failslab+0x121/0x190 [ 1665.284210][T31556] should_failslab+0x9/0x14 [ 1665.288724][T31556] kmem_cache_alloc_node_trace+0x270/0x720 [ 1665.294542][T31556] ? kasan_unpoison_shadow+0x35/0x50 [ 1665.299845][T31556] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1665.305713][T31556] __kmalloc_node+0x3d/0x70 [ 1665.310234][T31556] blk_mq_alloc_rq_map+0xfa/0x200 [ 1665.315286][T31556] blk_mq_init_sched+0x20c/0x750 [ 1665.320248][T31556] elevator_init_mq+0xcd/0x160 [ 1665.325028][T31556] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1665.331065][T31556] blk_mq_init_queue+0x62/0xb0 [ 1665.335847][T31556] loop_add+0x2dd/0x8d0 [ 1665.340011][T31556] ? idr_find+0x47/0x60 [ 1665.344199][T31556] loop_control_ioctl+0x165/0x360 [ 1665.349347][T31556] ? loop_add+0x8d0/0x8d0 [ 1665.353708][T31556] ? loop_add+0x8d0/0x8d0 [ 1665.358087][T31556] do_vfs_ioctl+0xd6e/0x1390 [ 1665.362695][T31556] ? ioctl_preallocate+0x210/0x210 [ 1665.367812][T31556] ? smack_file_ioctl+0x196/0x310 [ 1665.372840][T31556] ? smack_inode_rename+0x2d0/0x2d0 [ 1665.378122][T31556] ? tomoyo_file_ioctl+0x23/0x30 [ 1665.383090][T31556] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1665.389350][T31556] ? security_file_ioctl+0x93/0xc0 [ 1665.394484][T31556] ksys_ioctl+0xab/0xd0 [ 1665.398653][T31556] __x64_sys_ioctl+0x73/0xb0 [ 1665.403354][T31556] do_syscall_64+0x103/0x610 [ 1665.407961][T31556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1665.413861][T31556] RIP: 0033:0x458c29 [ 1665.417766][T31556] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1665.437380][T31556] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.445810][T31556] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1665.453790][T31556] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1665.461773][T31556] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1665.469759][T31556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1665.477745][T31556] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ea900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 2 (fault-call:9 fault-nth:42): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eaa00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eab00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eac00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:17 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010ead00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eae00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1666.301370][T31654] FAULT_INJECTION: forcing a failure. [ 1666.301370][T31654] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.348512][T31654] CPU: 0 PID: 31654 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1666.356624][T31654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1666.366690][T31654] Call Trace: [ 1666.370001][T31654] dump_stack+0x172/0x1f0 [ 1666.374360][T31654] should_fail.cold+0xa/0x15 [ 1666.378974][T31654] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1666.384827][T31654] ? ___might_sleep+0x163/0x280 [ 1666.389687][T31654] __should_failslab+0x121/0x190 [ 1666.394631][T31654] should_failslab+0x9/0x14 [ 1666.399146][T31654] kmem_cache_alloc_node_trace+0x270/0x720 [ 1666.405335][T31654] __kmalloc_node+0x3d/0x70 [ 1666.409856][T31654] blk_mq_alloc_rq_map+0xb9/0x200 [ 1666.414899][T31654] blk_mq_init_sched+0x20c/0x750 [ 1666.419860][T31654] elevator_init_mq+0xcd/0x160 [ 1666.424633][T31654] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1666.430635][T31654] blk_mq_init_queue+0x62/0xb0 [ 1666.435411][T31654] loop_add+0x2dd/0x8d0 [ 1666.439577][T31654] loop_control_ioctl+0x165/0x360 [ 1666.444614][T31654] ? loop_add+0x8d0/0x8d0 [ 1666.448968][T31654] ? do_vfs_ioctl+0xca/0x1390 [ 1666.453657][T31654] ? loop_add+0x8d0/0x8d0 [ 1666.457996][T31654] do_vfs_ioctl+0xd6e/0x1390 [ 1666.462603][T31654] ? ioctl_preallocate+0x210/0x210 [ 1666.467719][T31654] ? smack_file_ioctl+0x196/0x310 [ 1666.472749][T31654] ? smack_inode_rename+0x2d0/0x2d0 [ 1666.477973][T31654] ? tomoyo_file_ioctl+0x23/0x30 [ 1666.482924][T31654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1666.489184][T31654] ? security_file_ioctl+0x93/0xc0 [ 1666.494307][T31654] ksys_ioctl+0xab/0xd0 [ 1666.498475][T31654] __x64_sys_ioctl+0x73/0xb0 [ 1666.503085][T31654] do_syscall_64+0x103/0x610 [ 1666.507691][T31654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1666.513593][T31654] RIP: 0033:0x458c29 [ 1666.517496][T31654] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1666.537115][T31654] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:26:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x7fff, 0x7, 0x0, 0x2, 0x8001, 0x1000, 0x3, 0xfffffffffffffffc, 0x4, 0x2, 0x0, 0xa60, 0x100, 0x6, 0x10, 0x8}}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1666.545548][T31654] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1666.553529][T31654] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1666.561522][T31654] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.569509][T31654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1666.577498][T31654] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eaf00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:18 executing program 2 (fault-call:9 fault-nth:43): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000002b000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1666.946874][T31853] FAULT_INJECTION: forcing a failure. [ 1666.946874][T31853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1667.023568][T31853] CPU: 1 PID: 31853 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1667.031594][T31853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.041661][T31853] Call Trace: [ 1667.044974][T31853] dump_stack+0x172/0x1f0 [ 1667.049326][T31853] should_fail.cold+0xa/0x15 [ 1667.053935][T31853] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1667.059749][T31853] ? ___might_sleep+0x163/0x280 [ 1667.064617][T31853] should_fail_alloc_page+0x50/0x60 [ 1667.069832][T31853] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1667.075234][T31853] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1667.080990][T31853] ? memset+0x32/0x40 [ 1667.084991][T31853] blk_mq_alloc_rqs+0x223/0x7f0 [ 1667.089877][T31853] blk_mq_init_sched+0x266/0x750 [ 1667.094834][T31853] elevator_init_mq+0xcd/0x160 [ 1667.099611][T31853] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1667.105612][T31853] blk_mq_init_queue+0x62/0xb0 [ 1667.110479][T31853] loop_add+0x2dd/0x8d0 [ 1667.114649][T31853] ? loop_lookup+0xae/0xc0 [ 1667.119087][T31853] loop_control_ioctl+0x165/0x360 [ 1667.124117][T31853] ? loop_add+0x8d0/0x8d0 [ 1667.128460][T31853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1667.133925][T31853] ? loop_add+0x8d0/0x8d0 [ 1667.138264][T31853] do_vfs_ioctl+0xd6e/0x1390 [ 1667.142868][T31853] ? ioctl_preallocate+0x210/0x210 [ 1667.147991][T31853] ? retint_kernel+0x2d/0x2d [ 1667.152618][T31853] ? security_file_ioctl+0x3d/0xc0 [ 1667.157747][T31853] ? security_file_ioctl+0x4e/0xc0 [ 1667.162873][T31853] ? security_file_ioctl+0x93/0xc0 [ 1667.168000][T31853] ksys_ioctl+0xab/0xd0 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb100000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000000)=""/133, 0x85, 0x10000, &(0x7f00000000c0)={0x1a, 0x104, 0x20, 0x4, 0x81, 0x0, @local}, 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1667.172171][T31853] __x64_sys_ioctl+0x73/0xb0 [ 1667.176771][T31853] ? do_syscall_64+0x5b/0x610 [ 1667.181464][T31853] do_syscall_64+0x103/0x610 [ 1667.186081][T31853] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1667.191983][T31853] RIP: 0033:0x458c29 [ 1667.195892][T31853] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1667.215508][T31853] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb200000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1667.223933][T31853] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1667.231946][T31853] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1667.239933][T31853] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.247918][T31853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1667.255894][T31853] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:18 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb300000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0x55, ""/85}) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 2 (fault-call:9 fault-nth:44): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000001b600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x828c0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 1667.664790][T32018] FAULT_INJECTION: forcing a failure. [ 1667.664790][T32018] name failslab, interval 1, probability 0, space 0, times 0 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb700000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1667.723547][T32018] CPU: 1 PID: 32018 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1667.731593][T32018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.741664][T32018] Call Trace: [ 1667.744976][T32018] dump_stack+0x172/0x1f0 [ 1667.749324][T32018] should_fail.cold+0xa/0x15 [ 1667.753932][T32018] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1667.759765][T32018] ? ___might_sleep+0x163/0x280 [ 1667.764632][T32018] __should_failslab+0x121/0x190 [ 1667.769586][T32018] should_failslab+0x9/0x14 [ 1667.774128][T32018] kmem_cache_alloc_node_trace+0x270/0x720 [ 1667.779947][T32018] ? memset+0x32/0x40 [ 1667.783945][T32018] ? loop_init_request+0x25/0xb0 [ 1667.788905][T32018] elevator_alloc+0x7d/0x170 [ 1667.793515][T32018] dd_init_queue+0x25/0x440 [ 1667.798040][T32018] blk_mq_init_sched+0x3a2/0x750 [ 1667.803017][T32018] elevator_init_mq+0xcd/0x160 [ 1667.807803][T32018] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1667.813807][T32018] blk_mq_init_queue+0x62/0xb0 [ 1667.818627][T32018] loop_add+0x2dd/0x8d0 [ 1667.822804][T32018] ? idr_find+0x47/0x60 [ 1667.827020][T32018] loop_control_ioctl+0x165/0x360 [ 1667.832082][T32018] ? loop_add+0x8d0/0x8d0 [ 1667.836434][T32018] ? loop_add+0x8d0/0x8d0 [ 1667.840782][T32018] do_vfs_ioctl+0xd6e/0x1390 [ 1667.845393][T32018] ? ioctl_preallocate+0x210/0x210 [ 1667.850521][T32018] ? smack_file_ioctl+0x196/0x310 [ 1667.855568][T32018] ? smack_inode_rename+0x2d0/0x2d0 [ 1667.860817][T32018] ? tomoyo_file_ioctl+0x23/0x30 [ 1667.865766][T32018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 17:26:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) getsockopt(r0, 0x6, 0xffffffffffffffff, &(0x7f0000000440)=""/4096, &(0x7f0000000000)=0x1000) [ 1667.872016][T32018] ? security_file_ioctl+0x93/0xc0 [ 1667.877151][T32018] ksys_ioctl+0xab/0xd0 [ 1667.881327][T32018] __x64_sys_ioctl+0x73/0xb0 [ 1667.885931][T32018] do_syscall_64+0x103/0x610 [ 1667.890545][T32018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1667.896485][T32018] RIP: 0033:0x458c29 [ 1667.900400][T32018] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1667.920020][T32018] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.928458][T32018] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 [ 1667.936457][T32018] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1667.944445][T32018] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.952427][T32018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1667.961253][T32018] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 2 (fault-call:9 fault-nth:45): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000010eb900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:19 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000ffffffc900000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1668.149532][T32242] FAULT_INJECTION: forcing a failure. [ 1668.149532][T32242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1668.178384][T32242] CPU: 0 PID: 32242 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1668.186408][T32242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.196485][T32242] Call Trace: [ 1668.199809][T32242] dump_stack+0x172/0x1f0 [ 1668.204150][T32242] should_fail.cold+0xa/0x15 [ 1668.208751][T32242] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1668.214559][T32242] ? ___might_sleep+0x163/0x280 [ 1668.219422][T32242] should_fail_alloc_page+0x50/0x60 [ 1668.224626][T32242] __alloc_pages_nodemask+0x1a1/0x7e0 [ 1668.230009][T32242] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 1668.235744][T32242] ? loop_info64_from_compat+0x5d0/0x5d0 [ 1668.241482][T32242] ? memset+0x32/0x40 [ 1668.245481][T32242] blk_mq_alloc_rqs+0x223/0x7f0 [ 1668.250361][T32242] blk_mq_init_sched+0x266/0x750 [ 1668.255318][T32242] elevator_init_mq+0xcd/0x160 [ 1668.260125][T32242] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1668.266125][T32242] blk_mq_init_queue+0x62/0xb0 [ 1668.270898][T32242] loop_add+0x2dd/0x8d0 [ 1668.275075][T32242] ? idr_find+0x47/0x60 [ 1668.279242][T32242] loop_control_ioctl+0x165/0x360 [ 1668.284270][T32242] ? loop_add+0x8d0/0x8d0 [ 1668.288612][T32242] ? do_vfs_ioctl+0xca/0x1390 [ 1668.293291][T32242] ? loop_add+0x8d0/0x8d0 [ 1668.297627][T32242] do_vfs_ioctl+0xd6e/0x1390 [ 1668.302228][T32242] ? ioctl_preallocate+0x210/0x210 [ 1668.307339][T32242] ? smack_file_ioctl+0x196/0x310 [ 1668.312364][T32242] ? smack_inode_rename+0x2d0/0x2d0 [ 1668.317585][T32242] ? tomoyo_file_ioctl+0x23/0x30 [ 1668.322532][T32242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1668.328789][T32242] ? security_file_ioctl+0x93/0xc0 [ 1668.333913][T32242] ksys_ioctl+0xab/0xd0 [ 1668.338089][T32242] __x64_sys_ioctl+0x73/0xb0 [ 1668.342684][T32242] ? do_syscall_64+0x5b/0x610 [ 1668.347366][T32242] do_syscall_64+0x103/0x610 [ 1668.351966][T32242] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1668.357863][T32242] RIP: 0033:0x458c29 [ 1668.361760][T32242] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1668.381370][T32242] RSP: 002b:00007f3c20b03c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.389794][T32242] RAX: ffffffffffffffda RBX: 00007f3c20b03c90 RCX: 0000000000458c29 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000003d400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1668.397784][T32242] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1668.405795][T32242] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1668.413777][T32242] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b046d4 [ 1668.421774][T32242] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) r0 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000200)='\x00', 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="861191077656830e3da905c6d29a2021d82ca888226fdd3c72548e386b7eb95e6e28d24437199b71977ad153e1065b534fefd4d3c128575d3a89ebd44b7d6f58679ff30593", 0x45, r0) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000003e400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:20 executing program 2 (fault-call:9 fault-nth:46): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000ffffffe400000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000ffffffeb00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_setup(0x1, &(0x7f00000000c0)) io_setup(0x5, &(0x7f0000000100)=0x0) io_destroy(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x2}, 0x8) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) [ 1668.719287][T32352] FAULT_INJECTION: forcing a failure. [ 1668.719287][T32352] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.762970][T32352] CPU: 1 PID: 32352 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1668.771025][T32352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.781106][T32352] Call Trace: [ 1668.784420][T32352] dump_stack+0x172/0x1f0 [ 1668.788778][T32352] should_fail.cold+0xa/0x15 [ 1668.793372][T32352] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1668.799193][T32352] ? ___might_sleep+0x163/0x280 [ 1668.804064][T32352] __should_failslab+0x121/0x190 [ 1668.809019][T32352] should_failslab+0x9/0x14 [ 1668.813551][T32352] kmem_cache_alloc_node_trace+0x270/0x720 [ 1668.819392][T32352] __alloc_disk_node+0x70/0x420 [ 1668.824256][T32352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1668.830529][T32352] loop_add+0x3aa/0x8d0 [ 1668.834702][T32352] ? idr_find+0x47/0x60 [ 1668.838875][T32352] loop_control_ioctl+0x165/0x360 [ 1668.843912][T32352] ? loop_add+0x8d0/0x8d0 [ 1668.848250][T32352] ? loop_add+0x8d0/0x8d0 [ 1668.852589][T32352] do_vfs_ioctl+0xd6e/0x1390 [ 1668.857192][T32352] ? ioctl_preallocate+0x210/0x210 [ 1668.862308][T32352] ? smack_file_ioctl+0x196/0x310 [ 1668.867337][T32352] ? smack_inode_rename+0x2d0/0x2d0 [ 1668.872564][T32352] ? tomoyo_file_ioctl+0x23/0x30 [ 1668.877509][T32352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1668.883757][T32352] ? security_file_ioctl+0x93/0xc0 [ 1668.888884][T32352] ksys_ioctl+0xab/0xd0 [ 1668.893067][T32352] __x64_sys_ioctl+0x73/0xb0 [ 1668.897673][T32352] do_syscall_64+0x103/0x610 [ 1668.902281][T32352] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1668.908191][T32352] RIP: 0033:0x458c29 [ 1668.912104][T32352] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1668.931718][T32352] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.940146][T32352] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1668.948181][T32352] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1668.956167][T32352] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000fffffff500000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1668.964151][T32352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1668.972135][T32352] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:20 executing program 2 (fault-call:9 fault-nth:47): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000fffffff600000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:20 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000003f800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1669.128452][T32413] FAULT_INJECTION: forcing a failure. [ 1669.128452][T32413] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.162608][T32413] CPU: 1 PID: 32413 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1669.170641][T32413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.180735][T32413] Call Trace: [ 1669.184062][T32413] dump_stack+0x172/0x1f0 [ 1669.188410][T32413] should_fail.cold+0xa/0x15 [ 1669.193010][T32413] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1669.198841][T32413] ? ___might_sleep+0x163/0x280 [ 1669.203706][T32413] __should_failslab+0x121/0x190 [ 1669.208653][T32413] should_failslab+0x9/0x14 [ 1669.213170][T32413] kmem_cache_alloc_node_trace+0x270/0x720 [ 1669.218987][T32413] ? elevator_alloc+0xed/0x170 [ 1669.223761][T32413] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 1669.229320][T32413] dd_init_queue+0x9c/0x440 [ 1669.233843][T32413] blk_mq_init_sched+0x3a2/0x750 [ 1669.238815][T32413] elevator_init_mq+0xcd/0x160 [ 1669.243607][T32413] blk_mq_init_allocated_queue+0x1021/0x14c0 [ 1669.249616][T32413] blk_mq_init_queue+0x62/0xb0 [ 1669.254402][T32413] loop_add+0x2dd/0x8d0 [ 1669.258573][T32413] ? idr_find+0x47/0x60 [ 1669.262754][T32413] loop_control_ioctl+0x165/0x360 [ 1669.267792][T32413] ? loop_add+0x8d0/0x8d0 [ 1669.272137][T32413] ? loop_add+0x8d0/0x8d0 [ 1669.276474][T32413] do_vfs_ioctl+0xd6e/0x1390 [ 1669.281089][T32413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1669.286569][T32413] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1669.291873][T32413] ? ioctl_preallocate+0x210/0x210 [ 1669.297008][T32413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1669.302491][T32413] ? retint_kernel+0x2d/0x2d [ 1669.307115][T32413] ksys_ioctl+0xab/0xd0 [ 1669.311288][T32413] __x64_sys_ioctl+0x73/0xb0 [ 1669.315894][T32413] do_syscall_64+0x103/0x610 [ 1669.320511][T32413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1669.326417][T32413] RIP: 0033:0x458c29 [ 1669.330327][T32413] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1669.349945][T32413] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.358397][T32413] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1669.366383][T32413] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1669.374369][T32413] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1669.382352][T32413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1669.390336][T32413] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000407f800000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:21 executing program 2 (fault-call:9 fault-nth:48): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000025fb00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0xfffffebd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) [ 1669.565136][T32508] FAULT_INJECTION: forcing a failure. [ 1669.565136][T32508] name failslab, interval 1, probability 0, space 0, times 0 [ 1669.607036][T32508] CPU: 1 PID: 32508 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1669.615255][T32508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1669.625324][T32508] Call Trace: [ 1669.628738][T32508] dump_stack+0x172/0x1f0 [ 1669.633105][T32508] should_fail.cold+0xa/0x15 [ 1669.637710][T32508] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1669.643531][T32508] ? ___might_sleep+0x163/0x280 [ 1669.648405][T32508] __should_failslab+0x121/0x190 [ 1669.653350][T32508] should_failslab+0x9/0x14 [ 1669.657859][T32508] kmem_cache_alloc_trace+0x2d1/0x760 [ 1669.663242][T32508] ? part_uevent+0x120/0x120 [ 1669.667957][T32508] rand_initialize_disk+0x40/0xc0 [ 1669.673000][T32508] __alloc_disk_node+0x23f/0x420 [ 1669.677939][T32508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1669.684275][T32508] loop_add+0x3aa/0x8d0 [ 1669.688439][T32508] ? idr_find+0x47/0x60 [ 1669.692602][T32508] loop_control_ioctl+0x165/0x360 [ 1669.697629][T32508] ? loop_add+0x8d0/0x8d0 [ 1669.701966][T32508] ? loop_add+0x8d0/0x8d0 [ 1669.706308][T32508] do_vfs_ioctl+0xd6e/0x1390 [ 1669.710906][T32508] ? ioctl_preallocate+0x210/0x210 [ 1669.716017][T32508] ? smack_file_ioctl+0x196/0x310 [ 1669.721065][T32508] ? smack_inode_rename+0x2d0/0x2d0 [ 1669.726291][T32508] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1669.731755][T32508] ? tomoyo_file_ioctl+0x23/0x30 [ 1669.736701][T32508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1669.742956][T32508] ? security_file_ioctl+0x93/0xc0 [ 1669.748084][T32508] ksys_ioctl+0xab/0xd0 [ 1669.752249][T32508] __x64_sys_ioctl+0x73/0xb0 [ 1669.756850][T32508] do_syscall_64+0x103/0x610 [ 1669.761445][T32508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1669.767357][T32508] RIP: 0033:0x458c29 [ 1669.771257][T32508] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1669.791040][T32508] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.799471][T32508] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000003fc00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1669.807453][T32508] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1669.815436][T32508] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1669.823423][T32508] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1669.831406][T32508] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000fffffdfd00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000fffffffe00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000407ff00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:21 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0000000000000fff00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:22 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000fffff00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) 17:26:22 executing program 2 (fault-call:9 fault-nth:49): perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x1, 0x163882) io_destroy(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f00000007c0), 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 17:26:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_open_dev$sg(0x0, 0x1, 0x163882) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x4, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$user(&(0x7f0000000380)='user\x00', 0x0, &(0x7f0000000440)="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", 0x17f, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x0, @local, 'team_slave_0\x00'}}, 0x1e) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x800000001ffffffd, 0x0, 0x31}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) 17:26:22 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000007fffffff00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1670.431711][T32744] FAULT_INJECTION: forcing a failure. [ 1670.431711][T32744] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.457398][T32744] CPU: 0 PID: 32744 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1670.465525][T32744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.475591][T32744] Call Trace: 17:26:22 executing program 5: syz_read_part_table(0xff0f000000000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000ffffffff00000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) [ 1670.478910][T32744] dump_stack+0x172/0x1f0 [ 1670.483258][T32744] should_fail.cold+0xa/0x15 [ 1670.487871][T32744] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1670.493691][T32744] ? ___might_sleep+0x163/0x280 [ 1670.498557][T32744] __should_failslab+0x121/0x190 [ 1670.503521][T32744] should_failslab+0x9/0x14 [ 1670.508067][T32744] kmem_cache_alloc_trace+0x2d1/0x760 [ 1670.513563][T32744] device_create_groups_vargs+0x8e/0x270 [ 1670.519219][T32744] device_create_vargs+0x45/0x60 [ 1670.524212][T32744] bdi_register_va.part.0+0x38/0x740 [ 1670.529594][T32744] bdi_register+0x12a/0x140 [ 1670.534122][T32744] ? bdi_register_va+0x80/0x80 [ 1670.538895][T32744] ? enable_ptr_key_workfn+0x30/0x30 [ 1670.544195][T32744] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1670.550460][T32744] bdi_register_owner+0x61/0x110 [ 1670.555418][T32744] __device_add_disk+0xd72/0x1170 [ 1670.560466][T32744] ? blk_alloc_devt+0x2e0/0x2e0 [ 1670.565332][T32744] ? sprintf+0xc0/0x100 [ 1670.569498][T32744] ? scnprintf+0x140/0x140 [ 1670.573993][T32744] ? __init_waitqueue_head+0x36/0x90 [ 1670.579349][T32744] ? pm_runtime_init+0x311/0x3b0 [ 1670.584311][T32744] device_add_disk+0x2b/0x40 [ 1670.588918][T32744] loop_add+0x635/0x8d0 [ 1670.593101][T32744] loop_control_ioctl+0x165/0x360 [ 1670.598136][T32744] ? loop_add+0x8d0/0x8d0 [ 1670.602473][T32744] ? loop_add+0x8d0/0x8d0 [ 1670.606810][T32744] do_vfs_ioctl+0xd6e/0x1390 [ 1670.611409][T32744] ? ioctl_preallocate+0x210/0x210 [ 1670.616521][T32744] ? smack_file_ioctl+0x196/0x310 [ 1670.621558][T32744] ? smack_inode_rename+0x2d0/0x2d0 [ 1670.626786][T32744] ? check_memory_region+0x112/0x190 [ 1670.632104][T32744] ? tomoyo_file_ioctl+0x23/0x30 [ 1670.637081][T32744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1670.643338][T32744] ? security_file_ioctl+0x93/0xc0 [ 1670.648467][T32744] ksys_ioctl+0xab/0xd0 [ 1670.652638][T32744] __x64_sys_ioctl+0x73/0xb0 [ 1670.657259][T32744] do_syscall_64+0x103/0x610 [ 1670.661871][T32744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1670.667767][T32744] RIP: 0033:0x458c29 [ 1670.671671][T32744] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1670.691283][T32744] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.699711][T32744] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1670.707694][T32744] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1670.715674][T32744] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1670.723654][T32744] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1670.731633][T32744] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 [ 1670.750518][T32744] WARNING: CPU: 0 PID: 32744 at block/genhd.c:719 __device_add_disk+0xf00/0x1170 [ 1670.759763][T32744] Kernel panic - not syncing: panic_on_warn set ... [ 1670.766377][T32744] CPU: 0 PID: 32744 Comm: syz-executor.2 Not tainted 5.1.0-rc4+ #67 [ 1670.774355][T32744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.784425][T32744] Call Trace: [ 1670.787740][T32744] dump_stack+0x172/0x1f0 [ 1670.792104][T32744] ? __device_add_disk+0xea0/0x1170 [ 1670.797319][T32744] panic+0x2cb/0x65c [ 1670.801232][T32744] ? __warn_printk+0xf3/0xf3 [ 1670.805837][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.811140][T32744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1670.817393][T32744] ? __warn.cold+0x5/0x45 [ 1670.821745][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.826965][T32744] __warn.cold+0x20/0x45 [ 1670.831225][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.836463][T32744] report_bug+0x263/0x2b0 [ 1670.840815][T32744] do_error_trap+0x11b/0x200 [ 1670.845414][T32744] do_invalid_op+0x37/0x50 [ 1670.849835][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.855039][T32744] invalid_op+0x14/0x20 [ 1670.859218][T32744] RIP: 0010:__device_add_disk+0xf00/0x1170 [ 1670.865025][T32744] Code: 76 a4 4d fe 0f 0b e9 98 fb ff ff 48 89 bd 18 ff ff ff e8 63 a4 4d fe 0f 0b 48 8b bd 18 ff ff ff e9 b5 f7 ff ff e8 50 a4 4d fe <0f> 0b e9 80 fe ff ff e8 04 4b 20 fe 4c 89 e7 e8 0c b1 85 fe e9 3b [ 1670.884655][T32744] RSP: 0018:ffff8880a99f7af8 EFLAGS: 00010246 [ 1670.890729][T32744] RAX: 0000000000040000 RBX: ffff8880a99f7be8 RCX: ffffc9000ac7b000 [ 1670.898708][T32744] RDX: 0000000000040000 RSI: ffffffff8322e860 RDI: 0000000000000005 [ 1670.906688][T32744] RBP: ffff8880a99f7c10 R08: ffff8880a88fe240 R09: ffffed1015d05bc8 [ 1670.914689][T32744] R10: ffffed1015d05bc7 R11: ffff8880ae82de3b R12: ffff88809a257480 [ 1670.922677][T32744] R13: ffff88809a257510 R14: 00000000fffffff4 R15: 0000000000000000 [ 1670.930688][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.935910][T32744] ? __device_add_disk+0xf00/0x1170 [ 1670.941125][T32744] ? blk_alloc_devt+0x2e0/0x2e0 [ 1670.945985][T32744] ? sprintf+0xc0/0x100 [ 1670.950148][T32744] ? scnprintf+0x140/0x140 [ 1670.954570][T32744] ? __init_waitqueue_head+0x36/0x90 [ 1670.960328][T32744] ? pm_runtime_init+0x311/0x3b0 [ 1670.965283][T32744] device_add_disk+0x2b/0x40 [ 1670.969885][T32744] loop_add+0x635/0x8d0 [ 1670.974078][T32744] loop_control_ioctl+0x165/0x360 [ 1670.979106][T32744] ? loop_add+0x8d0/0x8d0 [ 1670.983444][T32744] ? loop_add+0x8d0/0x8d0 [ 1670.987780][T32744] do_vfs_ioctl+0xd6e/0x1390 [ 1670.992379][T32744] ? ioctl_preallocate+0x210/0x210 [ 1670.997493][T32744] ? smack_file_ioctl+0x196/0x310 [ 1671.002524][T32744] ? smack_inode_rename+0x2d0/0x2d0 [ 1671.007746][T32744] ? check_memory_region+0x112/0x190 [ 1671.013074][T32744] ? tomoyo_file_ioctl+0x23/0x30 [ 1671.018028][T32744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1671.024387][T32744] ? security_file_ioctl+0x93/0xc0 [ 1671.029507][T32744] ksys_ioctl+0xab/0xd0 [ 1671.033670][T32744] __x64_sys_ioctl+0x73/0xb0 [ 1671.038268][T32744] do_syscall_64+0x103/0x610 [ 1671.042871][T32744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1671.048779][T32744] RIP: 0033:0x458c29 [ 1671.052687][T32744] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1671.072314][T32744] RSP: 002b:00007f3c20b24c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1671.080760][T32744] RAX: ffffffffffffffda RBX: 00007f3c20b24c90 RCX: 0000000000458c29 [ 1671.088766][T32744] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 1671.096747][T32744] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1671.104727][T32744] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3c20b256d4 [ 1671.112703][T32744] R13: 00000000004c1f27 R14: 00000000004d4808 R15: 0000000000000006 [ 1671.122383][T32744] Kernel Offset: disabled [ 1671.126935][T32744] Rebooting in 86400 seconds..