program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:09 executing program 5: 12:30:09 executing program 1: 12:30:09 executing program 4: 12:30:09 executing program 2: 12:30:09 executing program 0: 12:30:10 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:10 executing program 5: 12:30:10 executing program 4: 12:30:10 executing program 1: 12:30:10 executing program 2: 12:30:10 executing program 0: 12:30:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="1a"]], 0x0, 0x0, &(0x7f00000007c0)}) 12:30:10 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x176}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5d64bf0160ee13e4ad99b98dcd13ae530d03113f01482858ee3f9ba87b0c3764cfcaa7646bc74a6679c96baae5008baa20bdc41a080cc2515b0f4bcc83d5aa05fec4a43a85fcd1edb8ca6318"], 0x4c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000004c0)="1f65ab93b95bc12134f824a4e1713c56da4dc86b33a92737ffc40536f253116bcb460ba3d994200c7911", 0x2a) socketpair(0xb, 0x0, 0xde, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000080)=""/228) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @multicast1, @remote}, &(0x7f0000000640)=0xc) r5 = socket$inet6(0xa, 0x0, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) gettid() perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x2, 0x93ce, 0xace, 0x0, 0xd8, 0x4000, 0x4, 0x7f, 0x3, 0x6, 0x80000000, 0xffff, 0xce8a, 0x80000001, 0xb5, 0x9265, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2000005, 0x0, 0xffffffff, 0x20000005, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000480), 0xa}, 0x0, 0x3, 0x1f, 0xfffffffffffffffc}, 0x0, 0x0, r2, 0xa) ioctl$sock_ifreq(0xffffffffffffffff, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000440)={"4854ff020900000007000000000000000000000000000000000000000a"}, &(0x7f0000000340)=0xfffffffffffffe40) dup(r0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sync_file_range(0xffffffffffffffff, 0x0, 0x4, 0x5) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$eventfd(r3, &(0x7f0000000180), 0x8) 12:30:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4004e22}, 0x1c) listen(r0, 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r0) 12:30:10 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:10 executing program 2: symlink(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) creat(&(0x7f000002bff8)='./file0\x00', 0x0) gettid() setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x0) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 12:30:10 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) memfd_create(&(0x7f0000000000)='%\x00', 0x0) [ 336.799768] binder: 9761:9762 unknown command 536871744 [ 336.875837] binder: 9761:9762 ioctl c0306201 200002c0 returned -22 [ 336.892375] binder_alloc: binder_alloc_mmap_handler: 9761 20001000-20004000 already mapped failed -16 12:30:10 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000200)='r', 0x1, 0xfffffffffffffffd) 12:30:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) [ 336.929926] binder: BINDER_SET_CONTEXT_MGR already set [ 336.950178] binder: 9761:9762 ioctl 40046207 0 returned -16 [ 336.964473] binder: 9761:9779 unknown command 536871744 12:30:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) chdir(&(0x7f0000000780)='./file0\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x72109c5fef5d34d3) fcntl$getflags(r0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) [ 337.016145] binder: 9761:9779 ioctl c0306201 200002c0 returned -22 12:30:10 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) read(r2, &(0x7f0000000200)=""/250, 0xaf923e5) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:10 executing program 2: r0 = socket$inet6(0xa, 0x1020000000002, 0x0) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) 12:30:10 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket(0x0, 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x26b) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) read(r2, &(0x7f0000000200)=""/250, 0xaf923e5) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:10 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 337.249678] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:30:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="0f20c06635000000200f22c00f07ba400066b80200000066efbaf80c66b84809038766efbafc0c66ed660f38037f290f017e0066b92209000066b86ee7571066ba7662e61d0f3066b8040000000f23d00f21f866352000000c0f23f866b9650b000066b80000000066ba008000000f30f23e0f35", 0x74}], 0x1, 0x0, &(0x7f0000000040), 0x10000000000000e9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:11 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)) 12:30:11 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)) 12:30:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0xffffffffffffffff, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) shutdown(r3, 0x1) 12:30:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 12:30:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x8000, &(0x7f0000000200)) 12:30:11 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)) 12:30:12 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000000c0)="19", 0x1, 0xfffffffffffffffb) 12:30:12 executing program 0: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000000c0)="b3", 0x1, 0xfffffffffffffffb) 12:30:12 executing program 0: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\n', 0x1, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000001100)=""/4096, 0x1000) 12:30:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000180)=""/146) 12:30:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cpuset.cpus\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000100)=""/242, 0xf2, 0x0) 12:30:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00', 0x55}) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) 12:30:12 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000340)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000001c0)=0xffffffff) read(r1, &(0x7f0000000540)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)) r3 = syz_open_pts(r1, 0x0) dup3(r3, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 12:30:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x0) 12:30:12 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0xffffffffffffffff, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) shutdown(r3, 0x1) 12:30:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) [ 339.374986] input: syz1 as /devices/virtual/input/input9 [ 339.381744] input: syz1 as /devices/virtual/input/input10 12:30:12 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0x400004e, 0x0) [ 339.502978] input: syz1 as /devices/virtual/input/input12 12:30:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x4000000000000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {}, {0x2, 0xffffffffffffffff}, {0x2, 0x4e21, @rand_addr}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='lo\x00'}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x41, 0x1, @thr={&(0x7f0000000140)="abf5bcd4b63d7028840dc412f1b05a9b11911904cfbf51bb3a5f801478b6af718901adf79d5a1fb0c060da3aeec320cb9b544c7390ec6fd8977afb37ba12a045bf03e46d092c06686babc53bb95adf73a63232d014464043b4a56faf1863a3d17e025d6785fc4431f3e892107247226b0a2220109802002f977662355b3ef9d956a47710506b838745a8655813f634be2c64a6b7b3edea3328247e23366e52be706db1dd5868fc4d778cbce16dc886dac643b031ba642abd6a310eed8bed9b5282f06b57718a2d226d8ea2bcc8ca8ebe8027e9c2c19cc575f2e0b8bd051b6924c6d07bccbc7d69753b269f34b8f8c5", &(0x7f0000000240)="bd38928d97520329faac84002912a2eb5dc918ade3b6dd35e6d54f81e153f77a2e2bbf0c991b083f07932194129d4942afe196a380aea482c1c4e3ddd2145a52996bb76f2b0844256800a4e5db61378b6d2391c97aed11d2cbb89ee0460a0c518c94fc57b176d510267fa35eaeefc5bb3bdfc7403d058a51c3a9a1b8769e80840862fcd3b1fbf009b39f1b97e44c9ed1a255f62ab107b1d3be1ca54c031351b2bb2924f7f01c0f719953011b7df55db5f76b0b6162d22179c9e36b560262df10c2ad540b5d189b7806865686961c46249a98defa7d3f"}}, &(0x7f0000000040)=0x0) timer_delete(r1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0x4, 0x0, 0x65c9}, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x109002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000380)={0x2c, 0x3, 0x0, {0x2, 0xb, 0x0, 'eth1ppp0#-&'}}, 0x2c) [ 339.547141] input: syz1 as /devices/virtual/input/input13 12:30:13 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x9}]}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000300)) 12:30:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='\n', 0x1, 0xfffffffffffffffc) keyctl$describe(0x6, r1, &(0x7f0000001100)=""/4096, 0x1000) 12:30:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)}], 0x1, &(0x7f0000000040)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpuset.cpu_exclusive\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000008c0)=ANY=[@ANYRESOCT], 0xfffffe18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000640)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) socketpair$inet(0x2, 0x5, 0x20, &(0x7f0000000100)) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r1, 0x0, 0x89, &(0x7f0000000680)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f"}, 0x30) perf_event_open(&(0x7f0000000580)={0x3, 0x70, 0x7fffffff, 0xffffffffffffffff, 0x101, 0x3, 0x0, 0x44a, 0x400, 0x7, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x6, 0x7f, 0x3, 0x6, 0x3, 0x4076ab38, 0x800, 0x7fff, 0x4, 0x0, 0xfff, 0x9, 0x0, 0x9, 0x9000000000000000, 0x7, 0x8, 0x9301, 0x80000000, 0x1, 0x1, 0x0, 0xffffffff7fffffff, 0x1, @perf_bp={&(0x7f0000000340), 0x1}, 0x400c, 0x7, 0x1, 0x5, 0xfffffffffffffffd, 0x9, 0x1ff}, r3, 0x10, r2, 0xb) gettid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1f) 12:30:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="6bae12ae00b880008ec8f30f2353660f6fea670f0fcfb6ba4200ec64f40f06ba420066b8df1301dc66efbad10466b8ca00000066ef", 0x35}], 0x1, 0x0, &(0x7f0000000000), 0x0) 12:30:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, r0, 0x0) 12:30:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000180)=[{0x6, 0xffffffffffffffff, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) shutdown(r3, 0x1) 12:30:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @local}, 0x80) 12:30:13 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) 12:30:13 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x10) 12:30:13 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, &(0x7f0000000180)='proc\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002440)={@local, @multicast2}, &(0x7f0000002480)=0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/4096, 0x1000) 12:30:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "054a96887411cc01467207edc55f81ffb9fa5dada865d979e015fd1fd73bcfbe1e182077b0704751fe90219c8ec71affef4500000000000000000000000400", "f20928d4e92413d868ec9af16845604e3d9a1d6106a28b0ab4d28269bc2a26ed"}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0) rmdir(&(0x7f0000000700)='./bus/file0\x00') socket$inet6(0xa, 0x0, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x5, 0x3ff, &(0x7f00000001c0)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) close(0xffffffffffffffff) time(&(0x7f0000000080)) ioprio_set$uid(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0xdd) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) 12:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000003400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000900)=[@increfs={0x40046306}], 0x0, 0x0, &(0x7f00000006c0)}) [ 340.200500] binder: 9970:9973 Acquire 1 refcount change on invalid ref 0 ret -22 [ 340.203229] sysfs: Unknown parameter 'proc' [ 340.229624] binder: 9970:9973 Release 1 refcount change on invalid ref 0 ret -22 12:30:13 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 340.270356] binder: 9970:9978 Acquire 1 refcount change on invalid ref 0 ret -22 [ 340.276253] sysfs: Unknown parameter 'proc' 12:30:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000280)=0xffffffffffffa254, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) [ 340.317085] binder: 9970:9985 Release 1 refcount change on invalid ref 0 ret -22 12:30:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x8351, 0x7000028, 0x0, 0x9000000]}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) 12:30:14 executing program 3: syz_emit_ethernet(0x140, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xd}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 12:30:14 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) bind$packet(r2, &(0x7f0000000240)={0x11, 0x3}, 0x14) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x2b, &(0x7f0000003b80), 0x2fe, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 12:30:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x400000000006) unshare(0x40000000) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x0, @remote}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) r4 = accept(r3, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) shutdown(r4, 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0x4) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000380), 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}}) sendto$llc(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x800, 0xffffffffffffffff, 0x40, 0xffffffffffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x1}]}, &(0x7f0000000440)=0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) r6 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000580)={r5, 0xfa0}, &(0x7f00000005c0)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r6, 0x6, 0x1, 0xffffffff, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x81, 0x5f70b710, 0x0, 0x3, 0x2, [{0xffffffffc8956d3c, 0x0, 0x4a2}, {0x2, 0x8}]}) 12:30:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000280)=0xffffffffffffa254, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)}], 0x1, &(0x7f0000000040)=ANY=[]}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='cpuset.cpu_exclusive\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000008c0)=ANY=[@ANYRESOCT], 0xfffffe18) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000640)) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) socketpair$inet(0x2, 0x5, 0x20, &(0x7f0000000100)) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r1, 0x0, 0x89, &(0x7f0000000680)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f"}, 0x30) perf_event_open(&(0x7f0000000580)={0x3, 0x70, 0x7fffffff, 0xffffffffffffffff, 0x101, 0x3, 0x0, 0x44a, 0x400, 0x7, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x6, 0x7f, 0x3, 0x6, 0x3, 0x4076ab38, 0x800, 0x7fff, 0x4, 0x0, 0xfff, 0x9, 0x0, 0x9, 0x9000000000000000, 0x7, 0x8, 0x9301, 0x80000000, 0x1, 0x1, 0x0, 0xffffffff7fffffff, 0x1, @perf_bp={&(0x7f0000000340), 0x1}, 0x400c, 0x7, 0x1, 0x5, 0xfffffffffffffffd, 0x9, 0x1ff}, r3, 0x10, r2, 0xb) gettid() ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1f) 12:30:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x21}, 0x14}}, 0x0) [ 340.963842] IPVS: ftp: loaded support on port[0] = 21 12:30:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x2d, &(0x7f0000000100)={@empty, @loopback}, 0xc) 12:30:14 executing program 3: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2) dup2(r1, r0) fcntl$addseals(r0, 0x409, 0x0) 12:30:14 executing program 1: 12:30:14 executing program 3: 12:30:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x182) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 12:30:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000280)=0xffffffffffffa254, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0xfffffffffffffffc) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000500)={0x18}, 0x18) ioctl$TIOCSTI(r1, 0x5412, 0x7ff) fcntl$setstatus(r3, 0x4, 0x4c00) ftruncate(r3, 0x8008200) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$evdev(r3, &(0x7f0000000000)=[{{0x0, 0x2710}}, {{0x77359400}}, {}], 0xfffffffffffffdc6) 12:30:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x3, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0028477c9ea93d"], 0x7) [ 341.860562] IPVS: ftp: loaded support on port[0] = 21 12:30:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x400000000006) unshare(0x40000000) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000280)={'ip6tnl0\x00', {0x2, 0x0, @remote}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) r4 = accept(r3, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) shutdown(r4, 0x1) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000002900), &(0x7f0000002940)=0x4) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000380), 0x4) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}}) sendto$llc(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x1a, 0x0, 0x800, 0xffffffffffffffff, 0x40, 0xffffffffffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x1}]}, &(0x7f0000000440)=0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) r6 = openat$cgroup(r2, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000580)={r5, 0xfa0}, &(0x7f00000005c0)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={r6, 0x6, 0x1, 0xffffffff, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x81, 0x5f70b710, 0x0, 0x3, 0x2, [{0xffffffffc8956d3c, 0x0, 0x4a2}, {0x2, 0x8}]}) 12:30:15 executing program 3: 12:30:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x8003f1) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x0, 0xffffffff}) 12:30:15 executing program 4: 12:30:15 executing program 5: 12:30:15 executing program 4: 12:30:15 executing program 5: [ 342.375518] audit: type=1804 audit(1540729815.848:38): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir606798342/syzkaller.4FyqdF/99/bus" dev="sda1" ino=16773 res=1 12:30:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000280)=0xffffffffffffa254, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:15 executing program 3: 12:30:16 executing program 5: [ 342.552508] IPVS: ftp: loaded support on port[0] = 21 12:30:16 executing program 3: 12:30:16 executing program 4: [ 343.144807] audit: type=1804 audit(1540729816.618:39): pid=10083 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir606798342/syzkaller.4FyqdF/99/bus" dev="sda1" ino=16773 res=1 [ 343.268733] audit: type=1804 audit(1540729816.738:40): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir606798342/syzkaller.4FyqdF/99/bus" dev="sda1" ino=16773 res=1 12:30:16 executing program 0: 12:30:16 executing program 3: 12:30:16 executing program 4: 12:30:16 executing program 5: 12:30:16 executing program 1: 12:30:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:17 executing program 5: 12:30:17 executing program 4: 12:30:17 executing program 5: 12:30:17 executing program 3: 12:30:17 executing program 1: 12:30:17 executing program 0: 12:30:17 executing program 1: 12:30:17 executing program 4: 12:30:17 executing program 5: 12:30:17 executing program 3: 12:30:17 executing program 0: 12:30:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:17 executing program 1: 12:30:17 executing program 4: 12:30:17 executing program 5: 12:30:17 executing program 3: 12:30:17 executing program 0: 12:30:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058009ed554fa07424ada75af1f021ce39c5a000000006d392de6138fa0ecb9f2b407c460e50994b0e2b2e6b3028d5ee2e8285c2c5c8605c83e1f2a3532d4ba31dbfc022a1ed104806a0ff1a4580f316f9132e7920fe9c31c56d6be9740aa2c38cf503cc0d40b53b9afb1903888d81c27b3911207719f3f03eef40b845aee6f34574c2dc32b671bf059b5651bdc64026c919d6c6cc3e8c3d70368528d579be9be891429adea336965716d6c264fd0d221cf814894545b9125ee031504fb714f6c00000000000000000000000000") flistxattr(r0, &(0x7f0000000080)=""/78, 0xfe4b) 12:30:18 executing program 4: r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000594000), 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) dup2(r1, r0) 12:30:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x3}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07}, 0x1c}}, 0x0) 12:30:18 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000300)={0xe1, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:30:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="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", 0x191}], 0x1, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:30:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x0) [ 344.765118] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 344.783169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 344.857560] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 12:30:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x3240, 0x6]) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x15, &(0x7f0000000980), 0x0, &(0x7f0000000400)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x1) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 12:30:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[], 0x0) 12:30:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:30:19 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000740)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate='uni_xlate=1'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:19 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000000c0)) r1 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r0, 0x0) tkill(r1, 0x0) [ 345.720107] attempt to access beyond end of device [ 345.753643] loop3: rw=2049, want=130, limit=112 [ 345.795230] FAT-fs (loop4): bogus number of reserved sectors [ 345.800523] attempt to access beyond end of device [ 345.827055] FAT-fs (loop4): Can't find a valid FAT filesystem [ 345.870151] loop3: rw=2049, want=130, limit=112 12:30:19 executing program 0: r0 = socket$unix(0x1, 0x400040000000001, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) [ 345.929817] FAT-fs (loop4): bogus number of reserved sectors [ 345.949035] FAT-fs (loop4): Can't find a valid FAT filesystem 12:30:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) 12:30:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:30:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x4000000000000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @loopback}, {}, {0x2, 0x4e20, @rand_addr}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='lo\x00'}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x41, 0x1, @thr={&(0x7f0000000140)="abf5bcd4b63d7028840dc412f1b05a9b11911904cfbf51bb3a5f801478b6af718901adf79d5a1fb0c060da3aeec320cb9b544c7390ec6fd8977afb37ba12a045bf03e46d092c06686babc53bb95adf73a63232d014464043b4a56faf1863a3d17e025d6785fc4431f3e892107247226b0a2220109802002f977662355b3ef9d956a47710506b838745a8655813f634be2c64a6b7b3edea3328247e23366e52be706db1dd5868fc4d778cbce16dc886dac643b031ba642abd6a310eed8bed9b5282f06b57718a2d226d8ea2bcc8ca8ebe8027e9c2c19cc575f2e0b8bd051b6924c6d07bccbc7d69753b269f34b8f8c5", &(0x7f0000000240)="bd38928d97520329faac84002912a2eb5dc918ade3b6dd35e6d54f81e153f77a2e2bbf0c991b083f07932194129d4942afe196a380aea482c1c4e3ddd2145a52996bb76f2b0844256800a4e5db61378b6d2391c97aed11d2cbb89ee0460a0c518c94fc57b176d510267fa35eaeefc5bb3bdfc7403d058a51c3a9a1b8769e80840862fcd3b1fbf009b39f1b97e44c9ed1a255f62ab107b1d3be1ca54c031351b2bb2924f7f01c0f719953011b7df55db5f76b0b6162d22179c9e36b560262df10c2ad540b5d189b7806865686961c46249a98defa7d3f"}}, &(0x7f0000000040)=0x0) timer_delete(r1) 12:30:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x500000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$netlink(r2, &(0x7f0000001280)={&(0x7f0000000300), 0xc, &(0x7f0000001140)=[{&(0x7f0000000340)={0x10}, 0x10}], 0x1, &(0x7f0000001200)=[@cred={0x20}, @rights={0x10}], 0x30}, 0x0) 12:30:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000001340)=[{&(0x7f0000001240)="1d", 0x1}], 0x1) [ 346.623816] attempt to access beyond end of device [ 346.652974] loop3: rw=2049, want=130, limit=112 12:30:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:20 executing program 4: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz'}, &(0x7f00000001c0)="15", 0x1, r0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, r0) 12:30:20 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xa) ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000100), 0x1c) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) 12:30:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') 12:30:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x0) 12:30:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl(r0, 0x8912, &(0x7f00000002c0)="153f6234488dd25d766070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @mcast2}}, 0x49) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x1a5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 12:30:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000050080000efffeffe809000000fff5ddfc37ca3326340000001000220f00000000000000cfb193e7ee00000000000000000000000000300800008c7f4411a8f0", 0x68}], 0x1) [ 347.016068] FAT-fs (loop3): bogus number of reserved sectors [ 347.034699] input: syz1 as /devices/virtual/input/input14 [ 347.042964] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) symlinkat(&(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 347.106630] input: syz1 as /devices/virtual/input/input15 12:30:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:20 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 12:30:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 347.303342] FAT-fs (loop3): bogus number of reserved sectors [ 347.361243] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) 12:30:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:21 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffffff48, 0x0, &(0x7f00004ee64e)}) 12:30:21 executing program 1: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='\f\x00 \x00'], 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, &(0x7f0000000640)) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc3", 0x2b) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r0, 0x0, 0x0, 0x0, 0x8}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200), 0x2c) 12:30:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 348.079174] FAT-fs (loop3): bogus number of reserved sectors [ 348.107878] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 348.172925] binder_alloc: 10317: binder_alloc_buf size -2121966856 failed, no address space 12:30:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) [ 348.238246] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 348.314754] binder: 10317:10329 transaction failed 29201/-28, size 0--2121966864 line 2973 [ 348.328926] FAT-fs (loop3): bogus number of reserved sectors [ 348.339419] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) [ 348.697340] FAT-fs (loop3): bogus number of reserved sectors [ 348.746604] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x17) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:22 executing program 4: io_setup(0x8, &(0x7f0000000200)) 12:30:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:22 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8}, 0xffffffffffffff95) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000100)="6c6f00966fd651b159a9c84a2c60d29800000020") 12:30:22 executing program 1: clone(0x20022100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)="0000000080", &(0x7f0000000300)='./file0\x00', 0x0, 0xaaaaaaaaaaaa96a, &(0x7f0000000100), 0x0, &(0x7f0000000100)) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @dev}, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6}, 0x20) [ 349.290153] FAT-fs (loop3): bogus number of reserved sectors [ 349.311162] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) 12:30:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:22 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) 12:30:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) [ 349.692881] FAT-fs (loop3): bogus number of reserved sectors [ 349.732577] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) 12:30:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) 12:30:23 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) 12:30:23 executing program 5: ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) [ 350.226264] FAT-fs (loop3): bogus number of reserved sectors [ 350.235970] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fgetxattr(r0, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000100), 0x235) 12:30:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:23 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000100)) 12:30:23 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) [ 350.440760] FAT-fs (loop3): bogus number of reserved sectors [ 350.499258] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) setpgid(r4, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:24 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0)={0x0, 0x0, 0x34}, 0xee) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000000000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init() socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) lchown(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) unshare(0x2020000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) 12:30:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x10000000000002e2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) 12:30:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) 12:30:24 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) [ 351.037449] FAT-fs (loop3): bogus number of reserved sectors [ 351.057809] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) keyctl$session_to_parent(0x12) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000200)=""/30, 0x10000038b) 12:30:24 executing program 1: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0)={0x0, 0x0, 0x34}, 0xee) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x8000000000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init() socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) lchown(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) unshare(0x2020000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) 12:30:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 351.261911] FAT-fs (loop3): bogus number of reserved sectors [ 351.279342] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) 12:30:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:25 executing program 0: memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:25 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51c871554c11cd59cc8fb47081025bad6b39df66157a96aae15813f0def00", "a8a4cd01e527e6fd3de453c7daf7b1900900000000000000361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "7b8ddce20000000c4116893616105829026954e70bfed06d00f97ca2644ab8a7"}) 12:30:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) 12:30:25 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x213}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) [ 351.888369] FAT-fs (loop3): bogus number of reserved sectors 12:30:25 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x213}, @local, {[@lsrr={0x83, 0xb, 0x5ef, [@remote={0xac, 0x223}, @multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) 12:30:25 executing program 4: [ 351.929325] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:25 executing program 0: memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x400, @loopback}, 0x1a) r1 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendfile(r0, r1, &(0x7f00000000c0), 0x401) 12:30:25 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1a) r2 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendfile(r0, r2, &(0x7f00000000c0), 0x401) 12:30:25 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) [ 352.236174] FAT-fs (loop3): bogus number of reserved sectors [ 352.267244] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:26 executing program 4: r0 = mq_open(&(0x7f0000000b00)='mask', 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mq_timedreceive(r1, &(0x7f0000000140)=""/178, 0xb2, 0x0, &(0x7f0000000240)) 12:30:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1a) r1 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendfile(r0, r1, &(0x7f00000000c0), 0x401) 12:30:26 executing program 0: memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x40000000031, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) 12:30:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:26 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 352.603040] FAT-fs (loop3): bogus number of reserved sectors [ 352.636124] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fef000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r1 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001240)={{{@in=@dev, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000c40)=0xe8) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000bc0)={0x7}, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/rtc0\x00', 0x2081, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz0', "cb58bdbce201a4f7a65b0ddc6811a1d6f6c1ab7bc26f87e927513deefe28d035eaef4641381de1676c5be3b702f7e559fb4400ffbb9520b9a3f8b9bdf1ef4d619b"}, 0x45) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={0x0, r5+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:26 executing program 1: perf_event_open(&(0x7f0000000d40)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000040)='/dev/net/tun\x00', 0x1) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getgid() clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)}) 12:30:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)="7461736b73004145d4f751e661be5b10a7bdf9297b65617476a10a10dc1fb01b3b04c4cc1fe88c51e6dcfd0e60359afad00124c441aa3f5d3f85e177673e7300fe162f660b027e748621a1c3470c9f6c23286fc81f3052d98cc59d7285d18e68a76aa098b5dcbd873356cc786c9b4f30205d557eb21230af645b0dcdca6a4ad8762b89822bf8e382d6a9bff2859a2c6b67acc0749c914572c011c41f56cd26b85d670ba13a5571552dd76670600880ffc75105dfd3a4fb65a4aa41f95c1f5f01703b44faee4bd1fdf4a361db497b108dff9bd201855c1bac4a5cbee1f21429bd817463e581944373abe0193fb85a4aadd82b", 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, &(0x7f0000000140)=0x7, 0x7fff) 12:30:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:26 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 352.860214] binder: 10582 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 352.860229] binder: 10582:10583 ioctl c018620c 20000000 returned -22 [ 352.918979] FAT-fs (loop3): bogus number of reserved sectors [ 352.957815] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) mq_unlink(&(0x7f0000000000)='nodevselinux.\x00') sysfs$1(0x1, &(0x7f0000000080)='nodevselinux.\x00') ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 12:30:27 executing program 0: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 12:30:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) [ 353.978775] FAT-fs (loop3): bogus number of reserved sectors [ 353.999395] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x6) 12:30:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000800)=ANY=[]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/244) 12:30:27 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$minix(&(0x7f0000000280)='minix\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) 12:30:27 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$netlink(0x10, 0x3, 0xa) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000005c0)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000001480)={0x20, 0x0, 0x0, {0x8}}, 0x20) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x113) sendmmsg$unix(r0, &(0x7f0000005240), 0x3a4, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 12:30:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) [ 354.316671] FAT-fs (loop3): bogus number of reserved sectors [ 354.337490] FAT-fs (loop4): bogus number of reserved sectors [ 354.367809] FAT-fs (loop3): Can't find a valid FAT filesystem [ 354.381503] FAT-fs (loop4): Can't find a valid FAT filesystem [ 354.495081] FAT-fs (loop4): bogus number of reserved sectors [ 354.543484] FAT-fs (loop4): Can't find a valid FAT filesystem [ 354.696191] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 12:30:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0x0, 0x1, [], [@generic, @enc_lim, @enc_lim]}, 0x10) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "260ba0550c4db6d2fe985da18052b7830bf54b5f21ff328670ad0f83592d93c544ef9495ea10a37e8ed896f87b8d3725b2b000b4d42c929ee85c075517d2c4a4", "9baac1753df57eff460e78c16412f42564e5e2a7fed713f90c7de27342981f46c909b1bf220305df03f252b429eb40f20a1e697e6779661100f940104f134cf2", "4926b340f0d0f0a08527417df889e5f0835317cc1ce35ca2239b28fd0269be63"}) 12:30:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netfilter\x00') fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x2}) 12:30:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') sendfile(r0, r0, &(0x7f00000004c0), 0x3) 12:30:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0x0, 0x0, 0x0, 0x274a}, 0x10) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000100)) 12:30:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)=""/189) 12:30:28 executing program 0: socketpair$unix(0x1, 0x200000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x14}, 0x14}}, 0x0) [ 355.013204] FAT-fs (loop3): bogus number of reserved sectors [ 355.019258] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}, {@uni_xlateno='uni_xlate=0'}]}) 12:30:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{}]}) 12:30:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x80) 12:30:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f0000000340)=0x4) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x64, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000002000000000a0000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb0300000000"], 0x1) [ 355.269239] FAT-fs (loop3): bogus number of reserved sectors 12:30:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x9, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) [ 355.324828] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}]}) 12:30:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff88, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xffffff16}]}, 0x70}}, 0x0) 12:30:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/211, 0xd3) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xde7) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000080)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) write$FUSE_INTERRUPT(r0, &(0x7f0000001800)={0x100000162}, 0xfffffffffffffe96) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001680)) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000000c0)) 12:30:29 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x20000000000000a9, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) [ 355.556019] FAT-fs (loop3): bogus number of reserved sectors [ 355.573437] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:29 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:30:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=""/255) 12:30:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}]}) 12:30:29 executing program 4: unshare(0x4000400) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002340), 0xc, &(0x7f0000002440)={&(0x7f0000002500)=ANY=[]}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) timer_getoverrun(0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001280)=""/161, 0xa1}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2) [ 355.827220] FAT-fs (loop3): bogus number of reserved sectors [ 355.846633] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:29 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff88, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xffffff16}]}, 0x70}}, 0x0) 12:30:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_getneigh={0x20, 0x1e, 0x607}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) 12:30:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newrule={0x20, 0x20, 0xa3bc010931239d7f}, 0x20}}, 0x0) 12:30:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f0000000340)=0x4) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x64, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@shortname_lower='shortname=lower'}]}) 12:30:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) [ 356.220059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 356.256722] FAT-fs (loop3): bogus number of reserved sectors [ 356.262566] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:29 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x5}], 0x28d) 12:30:29 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)="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", 0x200002, 0x0) fchdir(r0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:30:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@uni_xlateno='uni_xlate=0'}]}) 12:30:29 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 12:30:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="360f01380f182d66b8d530b4680f23c00f21f86635000000000f23f8baf80c66b808b48f8466efbafc0c66b80f00000066ef660f3829a486000fc72a660f61970000ba400066edd8c00f229b", 0x4c}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x10074d}], 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f22d8b9800000c00f3235008000000f3041df226466460fdce5660f3880970c0000004725e3000000260f013b66ba2100ed8fa9d893f82e0f07", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) [ 356.539980] FAT-fs (loop3): bogus number of reserved sectors [ 356.548070] FAT-fs (loop3): Can't find a valid FAT filesystem 12:30:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000007010100000000000000000000000000"], 0x14}}, 0x0) 12:30:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f00000000c0)=""/11, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) r4 = syz_open_pts(r0, 0x0) close(r2) dup2(r3, r4) 12:30:30 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xfb, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890b, &(0x7f0000000000)) 12:30:30 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) splice(r1, &(0x7f0000000180), r0, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3, 0x1c) 12:30:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f0000000340)=0x4) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x64, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:30 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) dup(r0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x55}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 12:30:30 executing program 1: dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) io_setup(0x0, &(0x7f0000000640)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)={@mcast2}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={0x0, 0xffffffffffffff6d, 0x12, 0x8, 0x0, 0x4}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0cae", 0x19) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x4000000000000000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) io_destroy(0x0) accept(r0, &(0x7f0000000180)=@ethernet={0x0, @link_local}, &(0x7f0000000200)=0x80) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000008c0)) 12:30:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 12:30:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000200)="766574000000000000000002bd6800") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/net/tun\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 12:30:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005a80)={&(0x7f0000001980), 0xc, &(0x7f0000005a40)={&(0x7f00000058c0)=@getspdinfo={0x14, 0x25, 0xf01}, 0x14}}, 0x0) 12:30:31 executing program 1: dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) io_setup(0x0, &(0x7f0000000640)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000004c0)={@mcast2}, &(0x7f0000000500)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000600)={0x0, 0xffffffffffffff6d, 0x12, 0x8, 0x0, 0x4}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0cae", 0x19) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x4000000000000000, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) io_destroy(0x0) accept(r0, &(0x7f0000000180)=@ethernet={0x0, @link_local}, &(0x7f0000000200)=0x80) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000008c0)) 12:30:31 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) [ 357.672678] : renamed from vet 12:30:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x5, 0x7d, 0x20000000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0}, 0x10) 12:30:31 executing program 0: pause() r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) fsync(0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)) 12:30:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xf, 0x4, 0x81000000004, 0x8000000007}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) 12:30:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:31 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x55}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') 12:30:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000280)={0x0, @speck128}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 12:30:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000340)=""/220) 12:30:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x4000000080) r2 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 12:30:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xf, 0x4, 0x81000000004, 0x8000000007}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000001440)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) 12:30:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000540)="ea", 0x1}], 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 12:30:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x8000a0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12:30:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000002) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000dc5f98)) 12:30:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x8000a0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12:30:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 12:30:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:32 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:32 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="360f01380f182d66b8d530b4680f23c00f21f86635000000000f23f8baf80c66b808b48f8466efbafc0c66b80f00000066ef660f3829a486000fc72a660f61970000ba400066edd8c00f229b", 0x4c}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x10074d}], 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f22d8b9800000c00f3235008000000f3041df226466460fdce5660f3880970c0000004725e3000000260f013b66ba2100ed8fa9d893f82e0f07", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) 12:30:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa259cf6604ec2c5f112b145d42a57f04db302fae5cea607c196d74c5e6fe9d89319cd2607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb9f439ebb4f0a1a17c30408542c170322996c9237a8ac78447000073373871e63e28c707528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb919764b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab113b197c04938f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1efacfa9a9f6b"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:33 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:33 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa259cf6604ec2c5f112b145d42a57f04db302fae5cea607c196d74c5e6fe9d89319cd2607b6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb9f439ebb4f0a1a17c30408542c170322996c9237a8ac78447000073373871e63e28c707528cb835318bb5641eda598b00ef62f9b5f11baa5483344b259aeee37bd00ba877dedc448532266dafe40030a2de03c9307b3579e3f4c4b7616b233b899080368198b0115ef74d9d1380824edd59b2789924fa0fa06bd0f8bc176dc36fd5bb919764b2110dd293890154ad73fe4275d65d7c17d6d554949abe0d31ab113b197c04938f17975a09af4b1e945cdeb8af18b1341bcc96ecf0514ba89d7a0c6e0f156a5b73f0adb39673d79447cac5ef4581f14d1800c975dca76e98f1efacfa9a9f6b"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:33 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) unshare(0x2000400) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r0}, 0x10) 12:30:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc1004110, &(0x7f0000001f64)) 12:30:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000100), 0x10, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008200)='/dev/vsock\x00', 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x7, @mcast1, 0x401}, @in6={0xa, 0x4e20, 0xfffffffffffffffc, @mcast1, 0x10000}, @in6={0xa, 0x4e20, 0x3ff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x100000001}, @in6={0xa, 0x4e23, 0x7ff, @loopback, 0x4}], 0x70) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x5a, 0x8000042001) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x6) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000680)={@mcast1, 0x71d, 0x1b6d7ea9fe75e2a3, 0xff, 0x8, 0xffff, 0x8001, 0x7}, &(0x7f00000006c0)=0x20) recvmmsg(r1, &(0x7f0000007f40)=[{{&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x3}, 0x400}, {{&(0x7f0000000b40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/80, 0x50}, {&(0x7f0000000d40)=""/96, 0x60}, {&(0x7f0000000900)=""/35, 0x23}, {&(0x7f0000000dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000001e40)=""/239, 0xef, 0x7}, 0x101}, {{&(0x7f0000001f40)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/184, 0xb8}, {&(0x7f0000003080)=""/220, 0xdc}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000, 0x10000}, 0x1}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000004240)=""/111, 0x6f}, {&(0x7f00000042c0)=""/14, 0xe}], 0x2, &(0x7f0000004340)=""/59, 0x3b, 0x4}, 0x8001}, {{&(0x7f0000004380)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004400)=""/151, 0x97}], 0x1, &(0x7f0000004500)=""/244, 0xf4, 0x1}, 0x6}, {{&(0x7f0000004600)=@vsock, 0x80, &(0x7f00000059c0)=[{&(0x7f0000004680)=""/184, 0xb8}, {&(0x7f0000004740)=""/159, 0x9f}, {&(0x7f0000004800)=""/192, 0xc0}, {&(0x7f00000048c0)=""/210, 0xd2}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005a40)=""/2, 0x2, 0x2f}}, {{&(0x7f0000005a80)=@rc, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/126, 0x7e}], 0x2, &(0x7f0000006bc0)=""/4096, 0x1000}, 0xd4}, {{&(0x7f0000007bc0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007c40)=""/198, 0xc6}], 0x1, &(0x7f0000007d80)=""/1, 0x1, 0x4}, 0x20}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007dc0)=""/222, 0xde}], 0x1, &(0x7f0000007f00)=""/59, 0x3b, 0x3}, 0xfffffffffffffffb}], 0x9, 0x0, &(0x7f0000008180)={0x77359400}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000081c0)={@remote, 0x7c, r5}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) capset(&(0x7f00000001c0), &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000580)='trusted.overlay.origin\x00', &(0x7f00000005c0)='y\x00', 0x2, 0x3) lgetxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600)=@random={'user.', 'em1systemGPL\x00'}, &(0x7f0000000640)=""/2, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000740)={r7, 0x2, 0xb785}, 0x8) bind$can_raw(r4, &(0x7f0000000440)={0x1d, r6}, 0x10) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:30:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000540)="ea", 0x1}], 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x10000effe, 0x0) 12:30:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="360f01380f182d66b8d530b4680f23c00f21f86635000000000f23f8baf80c66b808b48f8466efbafc0c66b80f00000066ef660f3829a486000fc72a660f61970000ba400066edd8c00f229b", 0x4c}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x10074d}], 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f22d8b9800000c00f3235008000000f3041df226466460fdce5660f3880970c0000004725e3000000260f013b66ba2100ed8fa9d893f82e0f07", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000100), 0xc, &(0x7f0000000000)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) 12:30:33 executing program 2: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:33 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) 12:30:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], @ANYRESHEX], 0x1a) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:30:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) 12:30:34 executing program 2: syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:30:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4), 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000031e000), 0x1c) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\b\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) 12:30:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:30:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x7c) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000240), 0x8) 12:30:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) 12:30:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000002) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0bc5310, &(0x7f0000dc5f98)) 12:30:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="360f01380f182d66b8d530b4680f23c00f21f86635000000000f23f8baf80c66b808b48f8466efbafc0c66b80f00000066ef660f3829a486000fc72a660f61970000ba400066edd8c00f229b", 0x4c}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x10074d}], 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f22d8b9800000c00f3235008000000f3041df226466460fdce5660f3880970c0000004725e3000000260f013b66ba2100ed8fa9d893f82e0f07", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) 12:30:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpgid(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote}}, 0x5c) 12:30:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080), 0x0) 12:30:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpgid(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote}}, 0x5c) 12:30:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x800005) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x7b}) write$UHID_INPUT(r2, &(0x7f00000001c0)={0x8, "7d97705478b28c5c41c7fb615a1e619772968f6634964503e19fb3f400ba3d527eabfe94b8cd56a20fa28d4108ead61abe1ef53a291ca51d3571d8329032504183ff8ce3e70eff1180d438f6bb88ee6ec284a521ba85d45a86f10b5e43b872fc2a917b0c22bca80a0d7791be52f698ad75a1648b39f5092aaeb6da07a013697332980fe7884cc70aef219e69379f4e791efe9f03b2ebce09ab71e2434297901b811bb12afc01fa6691337adb72062bbd22d683fda8ceb3a5d3d12c4a703b8052b9a38777884be6a00846ae36f68de407cd567773e5b8d867dae21e47a413c6afed71f0cef848baded213ae84e8ffe78ea223710bfdd5a8e4d79e49e62c651aded0ff53523fba551bb6e73e4157f6fd6a2a67c0380224d6047b8527cc3a9badacdf87eff7db94f2255891bad0b4a3bde753c74daeda1ad9d543463cd4da54c1ff774c94b43c8679e242f7b5a59846fb7f46ffc44e77b296d94c80fe1bdfafe0c9a0f3390cab7347d6fc24bdcde07a310ed72ec10085ce87ba49300f0ba8a5196edc4f2d2533e858f283dd150cb5efbffb96e9585264dfd9f8a6f43de259a88c0fc07642c6dafaceace2df57126d279abf7b718c635339d8ce04631ee66ff03fa038ad369054db5caeccb3ff06b5f4cda481e5641228f09b4dc803b5555c5925bed4536c979af532021bb3f8d87957c4f12aae38c978dd5aea386187723e742bdcb3a9dfc4a834a94f2ca5f6ce7e7ee0413a8129fea9cbaa6503920823acabfd087ad2a972fcc83265cc11e9c176c409b42b9b95de16500676dc666bf600153289a7136310f880cc8e6cf7437982a1c22a75b6d511ac64f1ce8aafcc890085b07917b7533d00030ed8a048e1583a4046525f30596ea3f1772876af18bd881dcdb0b9d6c379cedb71965cd77118f67fc0d88dd2895742d9058e635b0fa63e063142fa22cd3f6164f05acddfebf86a47174e946698fc4caf54559eee3d9bcbdf23c550f67dae20fb43e545962171dd079db5419d396f865e060b64a7bba01a1e67ff3d90cced5eeffa8a6f676dedf5aad244bd73561f8269ffde74fdf63a6f0a73460cdbd934ca7244ec1db23dfa7869314eb237a687935cd97d2159ef6609fed099e5c1f8b24a906cb2abb2c9feb091b3ca5ff2458f2ad52f0d47eb598dd43d73f6261c698d27d02ed8898bea53f6e7a4d5ad191e60e5a064a42cb5dd70df9d7f922ac90915cb0280a8b6c9f02380fef0dbe0d7f05561d6088a5dc7151bf4e8ed26da4f2735029517d0ba3180cd614505217707849e94a7b1b5dd98ac4c6db77f37242186c6debbbb47851901a8ec3a857841bf7045f1f83d3cdacbfbcaa84b11b742cd734470938551795bbc1d16fdeefbf412f6037da7b58d1655a1ca16f77679056fc26c57df5089e97ab3708fd919fee995e331cc38e7a17fac49c69581ba93baff39311a5115e1becc1064620ac9eeb7983f2c6da341484f3c99aceab8096afce9c7fb63f00ba531205fa45bd6a3517e49d321a2e5de34b661072557d650871ecc8adf845dd74bc03fc3d3e5992e9ea55ee5e16b81ba673a11fd28c722c3587e8cdec6958ff0904a22845beebfdeb91354c7b3e07667833abeec9dcf7d066bae894aec1e933bd49b46888ce0fd9c19c16f2e3e85090bf336252780e393cead34da187d1e61351dac21122eed2fe2f4eefa32332bcf8a46f652a3012e9cb39c2f95fc714900d0de85bc24350bef9d71e89b3b1635e8bcfc019118443be3ada8d1b88bc5dfef3e1165876d9849d7cf034c8fc704465d6db4e4f920f276c11c1420b7d44496bc92b4806ba5b40eadd04efa53fc85e06fa6b3d0fc67dc4385d01ae535476028b18987de71ad76b4886e4b0735584d5969fb6f4cecc17ac2c2d6e0e24b3732109d704d9b234efccf2a1a0dfa74ec0c48833c4c48b77a33dd58e03a7a7f93b054af6dd819770b7591f970768f251471236e0c11e939898d5abe58c37b0c0712434c28133503bd9d2f8348665ef31875c14ea183c0f5d35dc954f3c3352bfd550eb4e2957e21791d6787697bc6533bfd1d830561d38991f1cc6dc10dbdf70ffe36ab78400fe77624ff1e7893741fea5d47528a2da59ad8181df81577c010d13eac4cb8762e815e7989410524af56561f6c90a41baa11d4db50c90ef424d255a5bf01a4f3cee5a10c2dfc395ed391fcc63cd4f96d807b354dff1f65121c6d976c1966c01f0f8d1a7dd93280c42cdc38c507dd3f9fdc803bc46e2b0173bac9a2b02caaf2e5ea005d5054dcc0bf75c57d046bf83ef0fae5eae47d8abed50d34a6065d5e65fa18591bdc3ea64697d3b9ac015495f8bd15b223f62e9b646d60562078612e143e3249dee564fd10d70d4f2da9f82180df743d2915737f0a6633e8d39dd2999962c383c9b9f6f8f299221b0d68d6c91b1ca77b4a413f2bdfe708a41ad08d0e14508457e57fb1aa26d56185aaf0749e2fb2fffc8446a2068a261dbe0c09f1832726742e26b815ba12d7e7ee4e5648b840ef9c5501410d58ee39ffc7d47581a1ad503dbd40c20a33bdfcef5706817549489b4671e7cfa9e09968f3d00246c70cb27f2aa5b0403d9d914dae5884cd54d563c1b027d1556186da527db7a118b446efa4274a19859b3d2e4e0282cee80d9a5ed7de0af3d41270f1e1774a0913c0fdadbe5b9f9af8914dd8b82809ba8775041236f77f355f620ec12ccd1b19d4b2dd1cd72ec229d87e9ce66ba2b8a47ae15d9e612af3c3a1a73adef22245813e47686e1c02c339f83f8e8d05db1ff51c200fe6e2193db7a611d6326c18b5cc611844a23493b2f1dc3ab0a26f0d1d163d3f9a20fe8a0ee5403e096ea2e26997ed3c9db165b6bc99b4c9eb6de81a3533ce579206e71c488cf00c097d4802e5435d0a2a4ebe10167369c877d4b58d3ac5f1f8870381daceaf0c2fcb407bf3ff553c2ded8a5783bd96e6ee21730d88de2d4a98523a581902bdce395215525d7f97301a0d4c91430ea15b9766ab8aa9d4d70da859629ab6fb256a4eaa32532058278eeab28d2cbc801620d04bcfc573731145e8ba6b2e3a91ed9a18f660f526c075d4ee362321c311fd0e91e3d3ed0806e021b1f27df9586a879703800fa1354569d124d44288618844187e68fa53b7a049ec3785596902eca7b783fd649a3a8225537b860afe3b351af54d586e0626c4b620f61101b7e7b7a81f779e1d02c62e95776c54d8524768f3493e4ee07cf110128f0fbd7c25a2dfd10d34d452a0d1eed20667f0f4c96be50182e8ffa29f64104e1a262546f53a5a57b395a85fdc5aa70b52000cd788d8c04e60b755a1a2009eefcada5da08a53080338ed784890cc94e71ecdbf79af8740bbd3884b2afc40acd6dfe95afce9e74450afb385a0aa527d4959af56a99f58f7bd309d0ca721ab27d99cd8324ed49ea44fc00069b4c29575bad8529a3995d3ead22b37a9440e4daa8dcaa952f7d34994675e956c3650a5aa1e9467a196a54471ef23d432ce1223042e776b83ab2192555c56886f4a719ec0b40aeae443b5099ce539045cb58da3f40a9b578ebc017e70957d030e843b213f9869fe13e82f79108f26bc5e0ac0bb6aa876d40ab503460b0a9b841c4103c1734e59f87eda7fe8dcd8119cc1d92dc0c60af3164ed20e07228c13591b6bba553071665ec85adaa72b37926337176cf970e54bed200b6196bd008c6a26f8840b988c2c688cc25746edbccc245a6162c6ff623fb1d4a795f81331c7dc06942de28409e00a37190dff5bae1926883a2de4176f42e0b3d7846d0704ecfcdd879b2001630789628ad191348b3ee274773da1c2bf532b8df3539790b90b7e4cfca28ee5dba7d7f6e43be2ebf0fec440f6df247db8c7edc93b4da06adb3ecd0685ee6a4b92182af9af68a1a9752ca25734bde5af069cc456127d46f737fe306551db4d19c8f8d17aaf7f127c7f2760d7fc8d4101614a5b7c0c409a01a793a6cc004005253bcd4b1792178b8a2388037f70f8a40b6085df52e7dc6c90935c0e005c13b0e61a867a204d0e442217d96bc821917f0c5168785f7f4191504bae31803add9b8ee751a0c57352c989073edb4ba3e9941e279be9e4b2653618faf0a076fb32509906ca2fa69e127af9961ac67ea6f83d309f2f06512c5368560e43c1866495d5f06a704fb73bb044bb68bb429d80883910cb3e6429ecded9946d78b72a0543d188e18d13a43c7a9452634157a8493c4e64c5c402d4dfcb80339ba48364ea485d6ed6671e976993445e9a794a7428301644e76a4b78cd4e0cf16a7696571ac932a0885836feebe66819226ea774749f86dbe4724ac94ef9147ada15939628a1386096c9ecf22150b289247cc575de2444349ca750f638256de7e1acf74ef00eb958154b6a2307f07951c998b8c48eff08ba8171143621cb7ed99f1be8f00343d118764f7b608ff9522177070d3b41f5484305bc5b56c8b95ed4258c5a1c4f655de3782019c4649b410f2996b27aa3bbf95b8d1c1802b5a534070def363239fb28ae97fdf8612bd47f9fe9727ad9f25e05bb3c57905a18d16e4448d2e23a228b20c53c33ca268033cc966191d3188ccc4334c89362ba39358dc61a4048ecd52bc15745cffb1be1df272e4cc22cbe92cf60cdb0b61af51bd69b484b9656d2104832794c71cdd64a5f82972f4cea0d95bb8cf2f3b3e6295283762125a0baa41602846182bc692f0431e504789f568a764d1ff02784932740c2ba8ec8f2834b64496fd74cc6a1005fd9cfe21484042c0bd6bebff4daa17da14ee7b04ffafd09a0db19d1b352ecc4b53447fe0000f3e47e45443362d1cc88a129fbfab41ed40d7c471a841151d3ee6d5444825c290bcb15f370bd69577201a0d02bd56b38970e8d54a113e2073c6510f9c84ce078b857c4b8087a170f5d78a3bd24ca4d1af3b5b78deded0cdc1d04ade25b7682241d8524b6aa486026187c8cb74bc6870207ce4bdd6549fef83a00ccb42e23e0e1beeee4125b60874c21276f493536710e48915368c0ca3dff6d55a65f9204048e34d65a4959fdb8b09bbab424f3f010e776f05066446e80065723a3e7d6da637c4804e064674926849048fb846480a8fb0440d2d4bbf558451cfcbb842055071367ab7c7a8e5741983f6e4e6ccb3959abdc1ff53e7646172bd98c630967091ff76e71a827b6fd43fe1c3abec9ae221494971b86b6a5dbfc4ec4edd954b320767993b231c07bb72c61480b13db3c262f5377fcd9ce4b8508d37a7af11a22f56d23fd250d960e2284f63d5e318fd36868c969bb9b96d07eca9370ed72f5de9cd25b5634aa00d1f3a96832e6bd0cb68103dd406dea819922687aea7d17cec7755d397cab8a4439f26516faefa501bb3b131613f7ea0dc1f35e7fad4cfbeee91fa8ece73af05923fc22cd5a862714a4dbd7e6c856627b0e953183d71ced80ba5582e3ff03bc949a0c01e2c0915831adf01aac691e30a2bcad1921a0722722b2b043d4ba961033a16cab723b38d357cd6ceb5ee577f4aef4dac80f6e89cdd103fa8644b871da823069f9fe552b0fda2b8caada9b85742d8939b9ad2d206ba3cd27c16a1e0e68a5a7cd5f8f7604af94e37c12fac4f7fca197c77ecd62a7e5e3bd50ab348082d3978d4060aa511bc8d9cb72ef6b2d9e012767c17571bbf393788ed4685baee701dfc93350961b11166def92bba668d27bc584e2457d57a03a028e12aa0fa856605b3f027adb7b8a4d43a333aef5470aff2b581bfaa27c0be96e4e9cb4cb6ed8aff287d902bcf8500920b937399ba19fc8dd", 0x1000}, 0x1006) 12:30:35 executing program 2: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @local}, 0x5000) 12:30:35 executing program 2: r0 = memfd_create(&(0x7f0000000280)="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", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, "7175657565310000000000000000000000000000220000000000000000000078e9000000060000000000ccbf7ddd000000003f000d4500"}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 12:30:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 12:30:35 executing program 4: getpgid(0xffffffffffffffff) pipe(&(0x7f0000000600)) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000640)=ANY=[@ANYBLOB], 0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:30:35 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc}) 12:30:35 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000200)=0x4, r1, 0x0, 0x80004, 0x0) 12:30:35 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') sendfile(r0, r1, &(0x7f0000000200), 0x10000000200443) fsync(r1) 12:30:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x55}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x6, 0xeb}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:30:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000040)="360f01380f182d66b8d530b4680f23c00f21f86635000000000f23f8baf80c66b808b48f8466efbafc0c66b80f00000066ef660f3829a486000fc72a660f61970000ba400066edd8c00f229b", 0x4c}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x10074d}], 0x1) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="0f20d835080000000f22d8b9800000c00f3235008000000f3041df226466460fdce5660f3880970c0000004725e3000000260f013b66ba2100ed8fa9d893f82e0f07", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:30:35 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000280), 0x0, 0x0) 12:30:36 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = semget$private(0x0, 0x3, 0x742) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000080)=""/101) 12:30:36 executing program 2: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r1, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000540)=ANY=[]) syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') 12:30:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) 12:30:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:36 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000200)={{}, 'syz0\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x80000001) dup3(r1, r0, 0x0) [ 362.858488] input: syz1 as /devices/virtual/input/input16 12:30:36 executing program 4: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)={[{@fat=@time_offset={'time_offset'}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 12:30:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) write$FUSE_LK(r0, &(0x7f0000000040)={0x28}, 0x28) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 12:30:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000000040)={[{@quota_quantum={'quota_quantum', 0x3d, 0xffffffff}}]}) [ 362.981156] gfs2: quota_quantum mount option requires a positive numeric argument [ 363.014045] gfs2: can't parse mount arguments 12:30:36 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x9210) [ 363.034633] FAT-fs (loop4): bogus number of reserved sectors [ 363.041893] FAT-fs (loop4): Can't find a valid FAT filesystem [ 363.085658] gfs2: quota_quantum mount option requires a positive numeric argument [ 363.112960] gfs2: can't parse mount arguments 12:30:36 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[]}, 0x1, 0x0, 0x0, 0x55}, 0x40000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x7ff, 0x9, 0x0, 0x0, 0x6, 0xeb}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:30:36 executing program 0: 12:30:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)) 12:30:36 executing program 2: 12:30:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:37 executing program 2: 12:30:37 executing program 0: 12:30:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)) [ 363.828950] FAT-fs (loop4): bogus number of reserved sectors [ 363.837369] FAT-fs (loop4): Can't find a valid FAT filesystem [ 363.867688] *** Guest State *** [ 363.873374] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 363.899271] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 363.920537] CR3 = 0x0000000000000000 [ 363.931007] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 363.945414] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 363.960272] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 363.973308] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 363.981498] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 12:30:37 executing program 4: 12:30:37 executing program 2: 12:30:37 executing program 0: 12:30:37 executing program 3: [ 364.000167] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 364.009994] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 364.079160] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 364.124257] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 364.146392] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 364.165868] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 364.183873] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 364.192274] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 364.201232] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 364.211997] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 364.219608] Interruptibility = 00000000 ActivityState = 00000000 [ 364.225984] *** Host State *** [ 364.229232] RIP = 0xffffffff8120269c RSP = 0xffff880187397390 [ 364.235851] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 364.242421] FSBase=00007f5aed5a3700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 364.250485] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 364.256534] CR0=0000000080050033 CR3=00000001d76ad000 CR4=00000000001426e0 [ 364.264318] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 364.271065] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 364.277501] *** Control State *** [ 364.281061] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 364.288115] EntryControls=0000d1ff ExitControls=002fefff [ 364.294017] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 364.301040] VMEntry: intr_info=800000e6 errcode=00000000 ilen=00000000 [ 364.307965] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 364.314775] reason=80000021 qualification=0000000000000000 [ 364.321279] IDTVectoring: info=00000000 errcode=00000000 [ 364.327373] TSC Offset = 0xffffff3ae2fd7779 [ 364.331817] TPR Threshold = 0x00 [ 364.335542] EPT pointer = 0x00000001820f001e 12:30:37 executing program 5: 12:30:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:37 executing program 0: 12:30:37 executing program 4: 12:30:37 executing program 2: 12:30:37 executing program 3: 12:30:38 executing program 4: 12:30:38 executing program 2: 12:30:38 executing program 0: 12:30:38 executing program 3: 12:30:38 executing program 5: 12:30:38 executing program 4: 12:30:38 executing program 3: 12:30:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:30:38 executing program 2: 12:30:38 executing program 0: 12:30:38 executing program 5: 12:30:38 executing program 3: 12:30:38 executing program 4: 12:30:38 executing program 0: 12:30:38 executing program 4: 12:30:38 executing program 2: 12:30:38 executing program 5: 12:30:38 executing program 3: 12:30:38 executing program 0: 12:30:39 executing program 5: 12:30:39 executing program 3: 12:30:39 executing program 2: 12:30:39 executing program 4: 12:30:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:30:39 executing program 0: 12:30:39 executing program 5: 12:30:39 executing program 2: 12:30:39 executing program 0: 12:30:39 executing program 3: 12:30:39 executing program 4: 12:30:39 executing program 3: 12:30:39 executing program 2: 12:30:39 executing program 5: 12:30:39 executing program 0: 12:30:39 executing program 4: 12:30:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 12:30:40 executing program 3: 12:30:40 executing program 0: 12:30:40 executing program 2: 12:30:40 executing program 5: 12:30:40 executing program 4: 12:30:40 executing program 2: 12:30:40 executing program 4: 12:30:40 executing program 0: 12:30:40 executing program 5: 12:30:40 executing program 3: 12:30:40 executing program 2: 12:30:41 executing program 0: 12:30:41 executing program 4: 12:30:41 executing program 5: 12:30:41 executing program 2: 12:30:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:41 executing program 3: 12:30:41 executing program 4: 12:30:41 executing program 3: 12:30:41 executing program 2: 12:30:41 executing program 5: 12:30:41 executing program 0: 12:30:41 executing program 4: 12:30:41 executing program 3: 12:30:41 executing program 2: 12:30:41 executing program 5: 12:30:41 executing program 3: 12:30:42 executing program 4: 12:30:42 executing program 0: 12:30:42 executing program 2: 12:30:42 executing program 5: 12:30:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:42 executing program 3: 12:30:42 executing program 4: 12:30:42 executing program 5: 12:30:42 executing program 4: 12:30:42 executing program 3: 12:30:42 executing program 2: 12:30:42 executing program 0: 12:30:42 executing program 5: 12:30:42 executing program 0: 12:30:42 executing program 2: 12:30:42 executing program 4: 12:30:43 executing program 5: capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/248) 12:30:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000002580), 0x0, &(0x7f0000002640)=[{0x10}], 0x10, 0x80}, 0x3}], 0x1, 0x80) 12:30:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x1000000006, 0x200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000140)) 12:30:43 executing program 0: 12:30:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:43 executing program 4: 12:30:43 executing program 0: 12:30:43 executing program 4: [ 369.828077] capability: warning: `syz-executor5' uses 32-bit capabilities (legacy support in use) 12:30:43 executing program 3: 12:30:43 executing program 2: 12:30:43 executing program 5: 12:30:43 executing program 4: 12:30:43 executing program 0: 12:30:43 executing program 3: 12:30:43 executing program 2: 12:30:43 executing program 5: 12:30:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:44 executing program 4: 12:30:44 executing program 0: 12:30:44 executing program 3: 12:30:44 executing program 5: 12:30:44 executing program 2: 12:30:44 executing program 4: 12:30:44 executing program 2: 12:30:44 executing program 0: 12:30:44 executing program 5: 12:30:44 executing program 3: 12:30:44 executing program 4: 12:30:44 executing program 5: 12:30:44 executing program 0: 12:30:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:44 executing program 3: 12:30:44 executing program 2: 12:30:44 executing program 4: 12:30:44 executing program 0: 12:30:44 executing program 5: 12:30:44 executing program 4: 12:30:44 executing program 2: 12:30:44 executing program 3: 12:30:44 executing program 4: 12:30:44 executing program 0: 12:30:45 executing program 5: 12:30:45 executing program 3: 12:30:45 executing program 2: 12:30:45 executing program 4: 12:30:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:45 executing program 0: 12:30:45 executing program 2: 12:30:45 executing program 5: 12:30:45 executing program 0: 12:30:45 executing program 4: 12:30:45 executing program 3: 12:30:45 executing program 5: 12:30:45 executing program 2: 12:30:45 executing program 4: 12:30:45 executing program 0: 12:30:45 executing program 3: 12:30:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:46 executing program 2: 12:30:46 executing program 5: 12:30:46 executing program 4: 12:30:46 executing program 0: 12:30:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 12:30:46 executing program 2: 12:30:46 executing program 5: 12:30:46 executing program 4: 12:30:46 executing program 0: 12:30:46 executing program 3: 12:30:46 executing program 2: 12:30:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:47 executing program 5: 12:30:47 executing program 4: 12:30:47 executing program 3: 12:30:47 executing program 0: 12:30:47 executing program 2: 12:30:47 executing program 3: 12:30:47 executing program 4: 12:30:47 executing program 5: 12:30:47 executing program 2: 12:30:47 executing program 0: 12:30:47 executing program 3: 12:30:47 executing program 5: 12:30:47 executing program 4: 12:30:47 executing program 2: 12:30:47 executing program 3: 12:30:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:47 executing program 0: 12:30:47 executing program 4: 12:30:47 executing program 3: 12:30:47 executing program 2: 12:30:47 executing program 0: 12:30:47 executing program 5: 12:30:47 executing program 4: 12:30:47 executing program 5: 12:30:48 executing program 3: 12:30:48 executing program 2: 12:30:48 executing program 0: 12:30:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:48 executing program 4: 12:30:48 executing program 5: 12:30:48 executing program 3: 12:30:48 executing program 2: 12:30:48 executing program 0: 12:30:48 executing program 3: 12:30:48 executing program 0: 12:30:48 executing program 2: 12:30:48 executing program 4: 12:30:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 12:30:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) dup2(r0, r1) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 12:30:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4004e22}, 0x1c) listen(r0, 0xcb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x803, 0x7) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") close(r0) 12:30:49 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 12:30:49 executing program 2: 12:30:49 executing program 5: 12:30:49 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[], 0x0, 0x241}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000440)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @pic={0x0, 0x2947ea45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 12:30:49 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=""/32, 0xfffffffffffffdd1}) 12:30:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 12:30:49 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ppoll(&(0x7f0000003700)=[{r0}], 0x1, &(0x7f0000003740)={0x0, 0x989680}, &(0x7f0000003780), 0x8) 12:30:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x49c3f0c0, 0x4) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040)=0x9, 0x4) sendmmsg(r0, &(0x7f000000d8c0)=[{}], 0x1, 0x0) recvfrom(r1, &(0x7f0000003540)=""/68, 0xfffffffffffffed8, 0x10062, &(0x7f0000000300)=@ax25={0x3, {"9c3711aa278fef"}}, 0x7071c9) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a88072321202e25fa96"], 0xa) 12:30:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={r1, 0xdd, "dbe6159af1cb7e0b579e0308b35f2c511e8370636501acd66676a229ef032843cdd852be66cd4eb94ca076ffb844e6d9ac9ddace3e6038ddd71a617be3db8c3aade9e72945b90c468fa4f164741eb638ed54ebb862123e257ae3de3473308b30d85a35131d70dd645519068a8119e229622c3db9d74968d700135964988f21a775f952494017fc569ce129da68866198ddb9cf7699644d35c56db06edb36ad3f1c9379c1bb025fb237f4f4933f688eea45e1748a00fadb3264c4257700c486a0d8984bcf9581f195f785f17eb461003c0bd656ad4858fa5f9024294ce4"}, &(0x7f0000001a00)=0xe5) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001a40)={r2, 0x40000000000, 0x10}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000017c0)={0x81, 0x6, 0x6, 0x0, 0x0, [{r3, 0x0, 0x6}, {r0, 0x0, 0x4}, {r0, 0x0, 0x800}, {r0}, {r0, 0x0, 0x3}, {r0, 0x0, 0x9}]}) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000400)=0x2, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20400001, &(0x7f0000001480)={0x2, 0x4000004e20, @broadcast}, 0x10) clock_gettime(0x0, &(0x7f0000000340)) r4 = accept(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000740)=0x80) getpeername$inet6(r4, &(0x7f0000000780)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000007c0)=0x1c) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = accept4(r5, &(0x7f0000001580)=@sco, &(0x7f0000001600)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfffffffffffffffc, 0x2, 0x1, 0x1, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000001400)={r7, 0x8000}, &(0x7f0000001440)=0x8) recvmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000440)=""/240, 0xf0}], 0x2, &(0x7f00000002c0)=""/104, 0x68, 0x800}, 0x2000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001680)={0x6, 0xb, 0x8, 0x7bf8, 0x0}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000001700)={r8, 0x7, 0x6, 0xfffffffffffff1b3}, &(0x7f0000001740)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r9, 0x3, 0x30}, 0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) gettid() r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) sendto$llc(r10, &(0x7f0000001a80)="514f987fd5c76232a7bf0f47fa2ff715748032d500f1c708ddfd34b62c6cd988414520ae22e16adbfc058d5214b613d3f4dcb071225abc5422a6c355656ea33c2779b1880b2ff760893432204709f9ab263383fb3dc193f2f1178e1810c560c0b66a1f5f23b6216a59a324fe79c629a1b5a6461299c6c1c0f279705414bf7a9fedc0c02a45f83fd8533ca3771465cc7f71c7cf27deeee95cf2658ef668593d37bd", 0xa1, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x10000003, 0x1, @local}, 0x10) 12:30:49 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=""/221, 0xdd}, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, &(0x7f0000000300)) [ 376.388609] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 12:30:50 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=""/221, 0xdd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8906, &(0x7f0000000300)) 12:30:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x20000000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@un=@abs, 0x444, &(0x7f0000000240), 0x0, &(0x7f00000000c0)}, 0xc000) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f00000024c0)=[{&(0x7f00000014c0)="06f3", 0x2}], 0x1, &(0x7f0000002540)}, 0x0) 12:30:50 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=""/221, 0xdd}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f00000001c0)}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, &(0x7f0000000300)) 12:30:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="aa4163c5814b06c1b2134569ad7d6c2024e39ac7a04cb9989b5c3ee9d351627231965320a08d92a92f07228f5d0e10a90fe74e4c77ed77"], 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffcbe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000980)=@in6={0xa, 0x0, 0x0, @remote, 0x5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)}], 0x1, &(0x7f0000000600)=ANY=[]}, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000700)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000740)={r2, r3}) 12:30:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000fa0200000000000000000020950000000000000043e37c18824e833c04057565a9f40c74edab72a7e65bb6abdff0980f20b16428caa353e9518e8786fc4c4b148d1468903dd59e615bfa2e89c97a96212e15340af6e6177a4e364041b6331fc0377dcbf36530645a00f7a39d4308ed6885de8d46b8b8e8c3536fdbc58ceaebf0c23e13"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000340), 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r1 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x4, 0x4, 0x5b9, 0x3}, {0x5, 0xb86, 0x9, 0x2}, {0x800, 0x2, 0xffffffff, 0x5}]}) r3 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r3, r1, 0x0, 0x14f, &(0x7f0000000600)='}\x00'}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000140)='sit0\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000140)='sit0\x00') r8 = socket$kcm(0x11, 0x4000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f0000000080)=r8, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0x7f, 0xe5, &(0x7f0000000500)="81c03647dc7ab9ebcf61fa04df2f53bfcf41d0dd5cbecfeeab459b594854d950d0493b7e8da8c560f15daf8fc88236add58174b87d10b8fa2fc257b5ce866ddaa20a41decd30a861cb0cd23106a13f53d5b1f3a917e28b307561a167be6578ecee4d6a3c2285c352762689f4e718acc3ba65fa9ac1ceff7aea5bc88d30e88a", &(0x7f0000000740)=""/229, 0xffffffff}, 0x28) 12:30:50 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x400) syncfs(r0) 12:30:50 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 377.114687] audit: type=1804 audit(1540729850.588:41): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/225/memory.events" dev="sda1" ino=17023 res=1 12:30:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000580)='vfat\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)={[{@uni_xlateno='uni_xlate=0'}]}) 12:30:50 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:30:50 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x400) syncfs(r0) 12:30:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005001}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x100) 12:30:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r0, 0x0) mmap$binder(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x0, 0x180851, r0, 0x0) 12:30:50 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:30:50 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/80) [ 377.675302] audit: type=1804 audit(1540729851.148:42): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/225/memory.events" dev="sda1" ino=17023 res=1 12:30:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:51 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:30:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005001}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)) 12:30:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)) [ 377.925750] audit: type=1804 audit(1540729851.398:43): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/225/memory.events" dev="sda1" ino=17023 res=1 12:30:51 executing program 4: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) sync() seccomp(0x0, 0x0, &(0x7f0000001980)) mlockall(0x0) 12:30:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"6e7230010100", 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) 12:30:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 12:30:51 executing program 0: socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) write(r1, &(0x7f00000001c0), 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) 12:30:51 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) accept4(r0, 0x0, &(0x7f0000000380), 0x0) 12:30:51 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24000000220007031dfffd946f610500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, r3+30000000}, 0x8) 12:30:51 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000002f00)=[{{&(0x7f0000001b40)=@l2, 0x80, &(0x7f0000002180)}}], 0x1, 0x20000014) 12:30:51 executing program 5: r0 = socket$inet(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 378.279193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 378.291629] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 12:30:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:54 executing program 2: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:30:54 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:30:54 executing program 0: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ftruncate(r3, 0x2007fff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000300)=0x4) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 12:30:54 executing program 5: 12:30:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x0) 12:30:54 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:54 executing program 5: socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000180)) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:30:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80, &(0x7f0000000600)}, 0x8000) sendmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x7d1}], 0x1, &(0x7f00000001c0)}, 0x0) [ 381.042078] netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. 12:30:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=""/118, 0x76}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0), 0xc, &(0x7f0000000100)={&(0x7f0000000900)=@getroute={0x14, 0x1a, 0x1c974209d04c2781}, 0x14}}, 0x0) 12:30:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:30:54 executing program 4: 12:30:54 executing program 2: 12:30:54 executing program 2: 12:30:57 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:30:57 executing program 2: 12:30:57 executing program 4: 12:30:57 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:30:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 12:30:57 executing program 5: 12:30:57 executing program 4: socket$key(0xf, 0x3, 0x2) select(0x40, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)={0x9}, &(0x7f0000000600)) 12:30:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sysfs$2(0x2, 0x2, &(0x7f0000000340)=""/221) 12:30:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000240)=""/236) 12:30:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2000000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/180, 0xb4}], 0x1) 12:30:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) 12:30:57 executing program 2: set_mempolicy(0x8003, &(0x7f0000000000)=0x8, 0x7f) [ 384.389984] input: syz1 as /devices/virtual/input/input17 [ 384.405945] input: syz1 as /devices/virtual/input/input18 [ 384.443467] input: syz1 as /devices/virtual/input/input19 [ 384.498326] input: syz1 as /devices/virtual/input/input20 12:31:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 12:31:00 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0x0, 0x0}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)="757365722e5e2c6c6f9f5d2a76626f786e65743000", 0x15, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) 12:31:00 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x7, 0x200000022a}) 12:31:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:00 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:00 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x50, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x1800000000000069, 0x0, 0x29, &(0x7f0000000b00), &(0x7f0000000300)=""/41}, 0x28) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f00000002c0), 0x4) 12:31:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$kcm(r1, &(0x7f0000000b80)={&(0x7f00000009c0)=@in, 0x80, &(0x7f0000000b40), 0x0, &(0x7f0000002d40)=[{0x10, 0x118}], 0x10}, 0x800) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000140)=@xdp={0x2c, 0x7, 0x0, 0x15}, 0x80, &(0x7f0000000200)}, 0x7ffc) 12:31:00 executing program 2: 12:31:00 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:00 executing program 2: 12:31:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) [ 387.437325] binder: 12071:12072 Acquire 1 refcount change on invalid ref 0 ret -22 [ 387.447035] binder: 12071:12072 Acquire 1 refcount change on invalid ref 0 ret -22 12:31:03 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:03 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x50, &(0x7f0000000100)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x1800000000000069, 0x0, 0x29, &(0x7f0000000b00), &(0x7f0000000300)=""/41}, 0x28) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f00000002c0), 0x4) 12:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) 12:31:03 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001740)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}], 0x30}, 0x0) 12:31:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:03 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:03 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:03 executing program 2: 12:31:03 executing program 0: 12:31:03 executing program 0: 12:31:03 executing program 2: 12:31:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:06 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:06 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:06 executing program 2: 12:31:06 executing program 0: 12:31:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:06 executing program 2: 12:31:06 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:06 executing program 0: 12:31:06 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:06 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:06 executing program 2: 12:31:06 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:06 executing program 0: 12:31:07 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:07 executing program 4: timer_create(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) 12:31:07 executing program 2: 12:31:07 executing program 0: 12:31:07 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r0, 0x0, r1, 0x0, 0xab11, 0x0) 12:31:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:31:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0x2, 0x1, 0x1, 0x5, 0x7}, {0xc000001f, 0x20, 0x3ff, 0x401, 0x200}, {0x1}]}) 12:31:09 executing program 4: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) 12:31:09 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:09 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f0000001200)=""/39, 0x27}], 0x2, 0x0) 12:31:09 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:10 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x2a8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)="00000000000100"}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @remote}, 0xab052ebbe6fbd72e, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='erspan0\x00'}) [ 396.540784] audit: type=1326 audit(1540729870.008:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12175 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:31:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="153f623448217f5d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2b) ptrace$cont(0x1f, r1, 0x0, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) 12:31:10 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) pipe2(&(0x7f0000000040), 0x0) 12:31:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) 12:31:10 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) [ 396.976124] input: syz1 as /devices/virtual/input/input21 [ 397.032469] input: syz1 as /devices/virtual/input/input22 [ 397.310518] audit: type=1326 audit(1540729870.778:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12175 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:31:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) [ 397.438070] input: syz1 as /devices/virtual/input/input23 [ 397.473363] input: syz1 as /devices/virtual/input/input24 12:31:12 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) 12:31:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x122, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0xfffffffffffffee6) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) r1 = memfd_create(&(0x7f00000005c0)='user\x00', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000180)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}) dup2(r3, 0xffffffffffffffff) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80004) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000140)={0x7}, 0x7) syz_open_pts(r0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000380)=ANY=[]) syncfs(0xffffffffffffffff) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005380), &(0x7f00000053c0)=0xc) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/37, 0x25) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x40}}}, 0x90) getgid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)=0xffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000440)={0x0, 0x2, 0x7, 0x8}) fstatfs(r2, &(0x7f00000007c0)=""/183) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x5) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000600)) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 12:31:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$inet6(0xa, 0x80b, 0x0, &(0x7f0000000240)) 12:31:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x20004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 399.576715] input: syz1 as /devices/virtual/input/input25 12:31:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 399.633591] input: syz1 as /devices/virtual/input/input26 12:31:13 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:31:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xab11, 0x0) 12:31:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:13 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) [ 399.815004] *** Guest State *** [ 399.856111] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 12:31:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10000000000032, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000002, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200010c0], 0x0, &(0x7f0000000040), &(0x7f00000010c0)=ANY=[@ANYBLOB='\x00']}, 0x79) [ 399.904831] CR4: actual=0x0000000000022044, shadow=0x0000000000020004, gh_mask=ffffffffffffe871 [ 399.933517] CR3 = 0x0000000000000000 [ 399.937379] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 12:31:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xab11, 0x0) [ 399.959309] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 399.980764] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 399.997895] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.045891] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.078281] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 12:31:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:13 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x48207) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) fdatasync(r0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ftruncate(r3, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 12:31:13 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 400.093048] kernel msg: ebtables bug: please report to author: Couldn't copy entries from userspace [ 400.106956] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.159348] kernel msg: ebtables bug: please report to author: Couldn't copy entries from userspace [ 400.172954] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.189226] audit: type=1804 audit(1540729873.658:46): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir826145972/syzkaller.EuoTGk/255/bus" dev="sda1" ino=17089 res=1 [ 400.198335] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.234183] GDTR: limit=0x00000000, base=0x0000000000000000 [ 400.244229] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.262867] audit: type=1804 audit(1540729873.728:47): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir826145972/syzkaller.EuoTGk/255/bus" dev="sda1" ino=17089 res=1 [ 400.264974] IDTR: limit=0x00000000, base=0x0000000000000000 [ 400.308094] audit: type=1804 audit(1540729873.728:48): pid=12296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir826145972/syzkaller.EuoTGk/255/bus" dev="sda1" ino=17089 res=1 [ 400.312441] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 400.340115] audit: type=1804 audit(1540729873.768:49): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir826145972/syzkaller.EuoTGk/255/bus" dev="sda1" ino=17089 res=1 [ 400.362171] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 400.371061] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 400.388086] Interruptibility = 00000000 ActivityState = 00000000 [ 400.404328] *** Host State *** [ 400.407773] RIP = 0xffffffff8120269c RSP = 0xffff8801bbdf7390 [ 400.414293] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 400.420910] FSBase=00007f082349a700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 400.430438] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 400.436818] CR0=0000000080050033 CR3=00000001cd449000 CR4=00000000001426e0 [ 400.444645] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 400.451549] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 400.458091] *** Control State *** [ 400.461733] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 400.468883] EntryControls=0000d1ff ExitControls=002fefff [ 400.474808] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 400.481944] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 400.489189] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 400.496253] reason=80000021 qualification=0000000000000000 [ 400.503037] IDTVectoring: info=00000000 errcode=00000000 [ 400.508602] TSC Offset = 0xffffff279ec04336 12:31:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:14 executing program 2: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:31:14 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000002c40)="29000000140005b7ff02f002040860eb0101ff01ffa4f80c3df00fd57f25ffffff0100002a00f3ff09", 0x29) 12:31:14 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) [ 400.513872] TPR Threshold = 0x00 [ 400.517257] EPT pointer = 0x00000001d96d701e 12:31:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) [ 400.574361] netlink: 5 bytes leftover after parsing attributes in process `syz-executor2'. 12:31:14 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000002c40)="29000000140005b7ff02f002040860eb0101ff01ffa4f80c3df00fd57f25ffffff0100002a00f3ff09", 0x29) 12:31:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000035c0)=[{{&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x80, &(0x7f0000000280)}}], 0x1, 0x20000000) 12:31:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x8000000036, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=""/237, &(0x7f0000000100)=0xed) 12:31:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000480)=""/232, 0x21) getdents64(r0, &(0x7f0000000040)=""/242, 0xf2) 12:31:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000480)="640f00d83e360f35b907020000b8d9360000ba000000000f300f015a003e3e660f382486060000002e0f0864660f38816200660fd104c28fe918968f00400000650f07", 0x43}], 0x1, 0x0, &(0x7f0000000400), 0x0) 12:31:14 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:14 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/81, 0x51) 12:31:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:15 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:15 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080), 0x88) 12:31:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xf000}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x683}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:31:15 executing program 3: r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040), 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, &(0x7f0000000480)=""/232, 0x21) 12:31:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:15 executing program 3: r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:16 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) io_setup(0x81, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000700)}]) 12:31:16 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)}, 0x0) r1 = getpid() tgkill(r1, r1, 0x0) 12:31:16 executing program 3: r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={"62726964676530000000008000", &(0x7f0000000200)=ANY=[@ANYBLOB="12"]}) 12:31:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x1}, 0x14) 12:31:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/39, 0x27, 0x0) 12:31:16 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000340)) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x94}]}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '\x00'}, &(0x7f0000000300)=""/4096, 0x1000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f00000002c0)=0xfffffffffffffff8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000), 0x1c) 12:31:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:16 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:16 executing program 4: 12:31:16 executing program 2: 12:31:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:16 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:16 executing program 4: 12:31:16 executing program 2: 12:31:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4), 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:17 executing program 4: 12:31:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:17 executing program 2: 12:31:17 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:17 executing program 4: 12:31:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4), 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:17 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:17 executing program 4: 12:31:17 executing program 2: 12:31:17 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4), 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:18 executing program 2: 12:31:18 executing program 4: 12:31:18 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0xab11, 0x0) 12:31:18 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:18 executing program 4: 12:31:18 executing program 2: 12:31:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:18 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:18 executing program 4: 12:31:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:19 executing program 2: 12:31:19 executing program 4: 12:31:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:19 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140), 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 12:31:19 executing program 4: 12:31:19 executing program 2: 12:31:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:19 executing program 2: 12:31:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:19 executing program 4: 12:31:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:19 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:19 executing program 2: 12:31:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xab11, 0x0) 12:31:20 executing program 4: 12:31:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:20 executing program 2: 12:31:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:20 executing program 4: 12:31:20 executing program 2: setrlimit(0x7, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) 12:31:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:31:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xab11, 0x0) 12:31:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:20 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000d00)='wlan1:-GPLppp0cpuseteth1.-+procbdevselfem0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xdc, &(0x7f0000000580), &(0x7f0000000b00)=""/220}, 0x28) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/96, 0x60) getrandom(&(0x7f0000000500)=""/241, 0xfffffffffffffe23, 0x0) 12:31:20 executing program 4: socketpair(0x0, 0xa, 0x7, &(0x7f00000000c0)={0xffffffffffffffff}) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x100) set_mempolicy(0x1, &(0x7f0000000000), 0xc) socketpair(0x1, 0x5, 0xffffffffffff7fff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x480100, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x80, 0x3, 0x6}}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x20be20, 0x8000000001, 0x1}, 0x2c) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) 12:31:20 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:20 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 12:31:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x6, 0x20be20, 0x8000000001}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) 12:31:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 12:31:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 12:31:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:21 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 12:31:21 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x48204) write$P9_RMKNOD(r1, &(0x7f00000001c0)={0x14}, 0x14) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pread64(r2, &(0x7f0000005000)=""/4096, 0xfffffcbe, 0x0) 12:31:21 executing program 4: recvmsg(0xffffffffffffff9c, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=""/208, 0xd0}, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) writev(r0, &(0x7f0000000040), 0x36a) 12:31:21 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000d00)='wlan1:-GPLppp0cpuseteth1.-+procbdevselfem0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xdc, &(0x7f0000000580), &(0x7f0000000b00)=""/220}, 0x28) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=ANY=[], 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/96, 0x60) getrandom(&(0x7f0000000500)=""/241, 0xfffffffffffffe23, 0x0) 12:31:21 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="6e6f0e9fdecfafe574d71cd2f5ff679d46c992e3c7a1e012e5d8f30c4f823063d537ae3d7e76aec21aaab6baee581942b28c7d1679f0af3592d78d0a63ae2da1790dd11eab0f9033b0e9ce1a383fc42d7b2eae6023870a80e8d96cf811e18f01ba88d9a4fa569628180220e010ab31099853c0a7d2dfcff54db45de2233d52daa2feef847e73cd30a92d84d8c1f3782eeaf477956d02d4f39e674dc543eb834a623ac23a0fc23ee481fc5f7cc2338a80e285f6137d51ebd815507271505c95a231d5101bd654e816e33430fcb5ea7e491c1831ec0b4def5f5245fddca3cb300fb510b9c0b536423256dd0a83df7723cbbe2cef6fb89c988857c5a91beade0da222a39017533bf36d6f4c156d6f9de2fee49e051548a712d5a73bfbab7921be7f0c5df04025e1180d54c3b6e6856049ba16dc9d5b31f023e0611e439d09dee78aef3dcab1c31f5c752cfa8b", 0x14b}], 0x1, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) sendto$inet(r0, &(0x7f0000000340)="e4", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:31:23 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) epoll_create1(0x0) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={'veth0_to_bridge\x00', {0x2, 0x0, @loopback}}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:31:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:23 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe63) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:31:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4), 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 12:31:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) write(0xffffffffffffffff, &(0x7f0000000000), 0xfffffe63) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) read(r0, &(0x7f0000000240)=""/98, 0xfffffffffffffd99) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ion\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000002c0), 0x4) write$P9_RWSTAT(r2, &(0x7f0000000000)={0xffffffb1}, 0xfffffffffffffdd3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)="6c6f0000000000000000000000000200", 0x10) 12:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="6e6f0e9fdecfafe574d71cd2f5ff679d46c992e3c7a1e012e5d8f30c4f823063d537ae3d7e76aec21aaab6baee581942b28c7d1679f0af3592d78d0a63ae2da1790dd11eab0f9033b0e9ce1a383fc42d7b2eae6023870a80e8d96cf811e18f01ba88d9a4fa569628180220e010ab31099853c0a7d2dfcff54db45de2233d52daa2feef847e73cd30a92d84d8c1f3782eeaf477956d02d4f39e674dc543eb834a623ac23a0fc23ee481fc5f7cc2338a80e285f6137d51ebd815507271505c95a231d5101bd654e816e33430fcb5ea7e491c1831ec0b4def5f5245fddca3cb300fb510b9c0b536423256dd0a83df7723cbbe2cef6fb89c988857c5a91beade0da222a39017533bf36d6f4c156d6f9de2fee49e051548a712d5a73bfbab7921be7f0c5df04025e1180d54c3b6e6856049ba16dc9d5b31f023e0611e439d09dee78aef3dcab1c31f5c752cfa8b51af2804be0d865208c0eab0c22e8c8bd9764b7b27e0d2a3be0de042280d4dcd5ec9946f60448612aacd997ececd19c67356e4e5e44b6afad44e0a2aec2226c68e29291c5c2a820d94d81b166c9d6528ab5a7b103af97160aee1f7248c2a3a7ab476bfb40f0a1efe072af3b3acaf3f335e606692efb5d97b183365bdec6da5dcd8dffde5fb0e021e263911e6c38526c50b432ed7f545c811bc4706ef3a187e8b6694288b54a4104c7d58e2f03b25fda6d8aee2aedb8cc343334f8ea9d5577eb5274c22bc5414b5e8780452b0cc6813a221e57a4004504fb7389b4b28e5c05293a0f15a71a82280b47c9a2d73423d44a1fae4f7dadb11f4d82b1b70cbf13c2605edb15398c603fbe3dcbddfbe91cdf6a8a1ae9384732d1b2630d770cf25994b5e80d8dde9c2f172b66b5feef22701005a1de0f9f74597f3c390207c5c997983d3b4cb6f269770c98174c4fe3fbdc3b030293c57cb9669fca1b9a3684fc7556b8060ea1ea88c69a7d18436eb770d6696338c9605c16f98e4c2f85ec01ccbafcf20440991702a4375814df8025b0ba1cb87001532d788fafe869c99064190f10aff86febc5dc1eabc5e7fbe1cfa8da26643ce511773ee8f664a5c4097c67137847a680b3963906083d6c0843a66be26caef0584e1c4ee2925d1bfccec689400980f570c63c35c1d823bc2868aab7a2bbe2f366c216926b9dc4069b3dd60ca2048c7807107c39808006390c8b4f923b7e542efcbbef5bb6a93133617b04d2edee264183e9192691132316ed7e945776095f7d8a1975cf61fe1b3db4d78fb46eab7e6df7e29b40e21354ef481445dbdb7bc20dd93b3fa16d53b7a449321736bb84e02df514115d81cbb0461a3542b7d53e045f6ac6646885e0c66df647814845a34f4fc20056505f5aa8e9092dc8fe9e475437629ef75bb953d4ad05723ee7e31675ab12a328f020a07925fb8b073dff619b559020ef656324b6b3f76e3a824c81d1bb98e05267d0c8d6e7450f34375b16be3dacf9e28186adb9b0a264127d46302a2cf0269ddd3f0484b0ad0b3b0eebac6a45386e35909252e3e82c975c5c4f9b624c35ef7760e37055a994ca41986c8c720766320e2505c4b34b31e718951a16c0d8e1288120971530c1788c87db541800449927e95e2b8c86bccba00cf05caf435e83313407e76d35e4e09c1ba398a8cb2cad75805c502f9606a654c3599e3bca9d2302b7afd12b917372451b3416260f0b073d6b443f443ecdbd17379c5c9b2601ed3962837fa1578c5ce56a01584b551d5f5174afdf8b93bae0cee75086cb8290fe65087e58516b10fce97e1b22e62909708f5c8f9feacc035c80777c84b767aa078aa9a5ffe03cfa22aeef00fbafba9b1be4f74bf61ce86cc356cbff245d1afed6b3fc96b8eeb29940c824cc8a0eb02b801daf1d7d177e4e5111243a1f8b94da20fe4a443c683adfd9ec302682a3c8475dbd2e5067482629a311215500b42302bafc6b042d3330cb8ed852fb01b90719170d7773c2f4212d803f15c7d4e51d810ad55dab364f48bf157657afac3f92aa20a9c3af95bb63d122b6a8bdb81520d23d29bf10ec6658a281e5e6fed7e26ac759026e6e49125ef2fe8717f9124c6782e420640c67625b2c3c417eada5ac08b02b6308c4718aef1c53ec99d8bcd6a95cfffaa256b3347adbcf26aab2dc58d96bdc2e0665d20ff5b4531420299013042e1d91ecde5b5020d638af385cba9916c2606be32f96c64e3341b3f724b43aff8c9b724546a69ef5f18a9c455a4688848d9dde0fb5ea9d9bb80b7fb007e30fa9d2ceb90dcfcdf64d69c9584f239bbae134fb1053ad78f31c324e047e8cb8545f6127b024ff293e3f7b28e7588c7bcee1cffc9d8df1b1e6f3d33fa155a93b2be6074fb4daa67857a4ce38cb4e01743f2a45ff4065f00e1a37655661d2973b0e8bc899981aa71feb55089b644f054a2a1c87143b4eb4e59fb18a99aa8af10598cb4befea33057389d3d78f86527c11229100bacd8e8f98fe1f26cc4931cb5ce90a9be15f6af021b76fcfb86f90328177f356c280470276594b1130928038fea6f5fc7e83cde791638377f96e48465faf1e1b5b88e62c128a1dddfd703b84e7d09af3fbd2ef52d0ee42ab18abb54f7009584eee101224c23a49e6c061fcdc25c91972e2964c680745ae88a1899ad2ee0c092a522b489daa89f9a9fa40d4d3eaf354e8bf94c6439db5ed4ed12d057a3c62ef7b562f0c1b0c119af2c1e4d67cd986cdc873f92446e0647044ab547defb7eb576614eec257cdf69605ef6cf55d9d09194b443994a25838ea01518698554b0345d985b7f871ff36150819ccb95fb96d2cd7837f4f7bf8166b3062fc958cba1cb1e259575e05f994a76416a54e37512eb3abd61878b4ded1bd349d23e8ee0aef832b35b4fef0ab95889276512d4847a24a207071912368df0bdcf72791582b596e4f0edcf216f9e066720f11676a82c721f23bcf854d8e7db65a2f6c1dd130f080c666f49760edbffaa687b2847216295648398076d5593d16190d6b24c924ff34f5a0e8fc2e780cfa019cd1a32af5f23a26bc4ef993eddb503249329d8f6cf1c5b544a2c45d19dbe92ef2c851c9b52bef8aedab65a2aa0203259f074f1d056e045b9683bf1ed48c2c8bb45b5c60ef61be262f22be804e0b606f6e3e8091087e3e045b97e70d95646b3815d01340a99a747d89aab721b02ea13def6249351eab2d29751170f162ebf99ae1c895c0b89013f197240dd65dae62e02f54a6b2768b74a2ec4c0876cf064703a67fcb23ec86b82cc3506c1eebf0ae23f6c566676264395e6bcf3676c31a6995778228a6f0e6a55e3931d27590ddc7f5f8519d788d13c7ecbfba4f1e4bad94729361376aba3b8c7225c1f4c9185d8fb31617e505fa097028c88082fd3ea45e56bb9d9413602afba3796ec09d91fb84f36fe51802ca140d95af926b1c2e0bb95da274b7856007f5b18833f5954b6c8701dab817c1c30d7add9affc037ecf3e8d3878be374e61ee0f6e1e2fbc6548314de055f3e4a7ce88c104167c0691a47a55aa033027b945d56fd9921eb74c372b34c551b5a4fb39905ca9c85b5b3334b217322c5ef22bbec63a122a9586165d32094ef6fa85dac000638e0597bcbccf3a4524d24b233cb8fc6b8ec70ee50afb907a89a3ec5063732603de4cbd25b54f0f8c7f0b0152fd49f3bccddab3b2e9d3e5acc920d0ed2b3a2c8fea58747dc1a4841de9b4688fea730bfadf5286f1df008d231a68c4f425a4d66c22724c2906ea0e0060443603ca83439f09a59b3fbcc3a71557e4ce5bf6cce69fa807b85ca8df87d8404d74faac9fc06495534efe989d455d8b9c055f875f0ce5cb62f94d35546030eb45f3a2dfb1945b45e01d52975031cf63eac4518642b1481dfee1163d34e84b1afb87a243ca71f386f3b0bbe347a79fe8d4dc27f6d5a129b905d7ef550bca1b614a6e50f6ba313f36602385fc53670b08a71e2e490c0380a34e1b82cfd926ee4f04bc087bf6a36256b9ee9c9d72d631290ddc5caa209842240c38e73c51ae11d78ad8f7e90abbfe9d89bed828a063ee83a49e533db01c8a0de5e9c9e0a96c94c9527cdb772d7a46022a35da57a7d28613342090f7a1be3abf9fd9f3e24370c78a161b03bc9027a3a128333be810cd4d6cb7abac2a0e19295bfd0d0871635dff8d796e3d6a6121c933c52e116a845ee75d5a24fccbe91d8c60394532b871e56e949f13b1023f262f42eaae8bd30e4f92926a96524277b321e34d10f03cdc359c883d2cfa5336fde8df0a08ba36f5841f496c7bb44384a3cbecaca5729b9edc82c7344c33277531baadf95f2ca51d7be8c7e2c78a80ce670aef3263a1553be09f83c6de6d90371c729fd20a80ca0027064342e864d703b8a779d2bf7f4017c78134593495a2808f72d443c3841f678574638d2ed4307a6765c7f8e5f10ddab7961ae297ca1104ea2eb5a26c002713b2bb8bc3d7579c7890084c9ae7f1a992edf6595e575c48f40c4c01cd84e4ee72bdfa6b76667e76e29305ef5f4de98bf89c4c596d0aa8f61dcae7030faff6db5710261f5e679a7897f00c22a843efb5eea1489cc6e90f70d7e4fddfe62b24334694ffd658933956d9ab49a18e14b475e10eb0d7c86d60d68516bdc77f8dcdb4e4f18c80569923c739d6a5ef9767b09abecdc46cbd66285404e9391f3aab3d10e0fc681fcc93d393345bfd1ca6479581064e662eba85a63c1529adeb0c85faf1860a448a481765af41803a7180e947b5b34b4202cbe52c2e48f73e9b298ea2c7e8b7b05511812a6b43aa4978ac331990ea82e7bed1dd258f61b99dc5ea7ee14574e6c03d3811e0d715848e7cd0243bd94d0201bf47cc534e3fdbe7c13b3684647fc3160435ba027de13731583ab5c1359d849584446d508932e1318fad377689eee61ff0f7c0485812a8d7cdedd9909f48ebd9799c3adec7f2ddf23757829a978775b47cbc57e1b02e11a39cb9d90d67a40d1f16f15b4fc97e7c4d71d4cafdc5422f7a688275976eefaf72bad487fe3012e37f06ef940384e903096b1ea9d234f9a52b1f91ba321171904973646d64aff64e9007337e9612ba639de8cb321aa3d099e1d0c40cc81ef0360cfbfbfdc1d727239281b7436a9bac2a5f44793a1f3c39d294ae7e7f28b1d214e3ea409c2a41a36b7ee4a144a9a09dfe5742d7d9d9360bd24aca865c5df3f66ca9d0298cd41d26146a861ba5a118f38824608750ef3b00544544a8aca45606e654ba80bb769c2c00f87038cb5c830c530c751cbfd528bb11e822b3189ecbf097a929749f44504184010287c2d24c43415d7939ed01a35204769c51f4d65658fb2a8c1e492b2d847ecf13d4199fd5bd7b1371219dc880259e79957c70d2325d836bacbfbe55f5628e88e8722b6bb538d7b2826acb6355403903dd6d8a0d9b74f626b1ae0d5ec1d64141f208a02b09f66f702f9e88a0aa44f625e99a6cd56fbe03052cfc80a7fbb18171a93e24e24e34aefd8b88c8b2a6c9b4a4e91bda0aa471511af7ac2ad4dd0afe3e5214a6d32c9a0c331e967ead0a3d0b8a4b7875d7defb9a1bfe896d5ae0857101044f2d98731ca457b555247e5b276a9fb29e8055e3982df9a44acf05a28742561129d5dbec4e45827d4823825e53dc5609f16336a02d55cbb9a8", 0xf9d}], 0x1, &(0x7f0000001780)}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) sendto$inet(r0, &(0x7f0000000340)="e4f3ed09200c036f6d3a378e60e359f22951307c9f9d68f749b1f1dd8db083ffdde59bc4905f67bfcc6c6a27d1216c85b0ac44ec3baf04ca823371274295d8aac58c44054d1f4a79998100fac95c94128d1a5482f242d168d34c0d43a190dd8d763fc2", 0x63, 0x0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 12:31:24 executing program 4: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0xfffffe63) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 12:31:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x12c]}, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 12:31:26 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001580)={r1, r0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000300)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000940)="6c6f00966f380f64a1e3d75d627d1fa159ad34909d60d298000000202759175d1563ca52dd984f43891be784e2058077d27c448d4b144278cb7548c2ee63bf3c3e591afc1f394f4281891636c571406eb4b673b00000fc0000080000daefec45ecd549b29bfe8d903f00e9e47e673ac1b2616a96bba7e2c0dcf95108eb167f5411d30d37e62266cf8eab640f747082aed2158e2b63f6bfe1343ea62da563ded7abea1ff873329c5646d518fe0e8f20010000792efc2a82a5a17035c87bf7efabe899eb77238a741c80fcb095a2a7d72c595d45388358f546dc882df5b0b55edb1ab6aa14e2b90d685e4a2dd1ba556e04276c1be06fdbc891251cb5bfb690b4c27f5d2fb3e7c92794cf496fdf0495b506841f483edac504209488eb27d43b367fd9992d1b7c478dd4b925aa51a04b100393e1cce76d8027f0a5ed280da80f26b1f3ff300c82255f928b44b9d9e7f2e4c16923dc8741b9c70d92fa1111b51f039ddd1b6adfac67e3a053d38ae16e97eaf5a0270be9a0f12066aa6ecfb569b664bc920bd5381608b35f3aa4210a79c4260a574d4da8c40b9f016ff4ab26b6170250c3214ea18622d704f1c021edffee24c8398c4230d16444e0495088a2f2599a662424f18196f750acca803a21b49423cb5e9f2703e393b982bfcfc4e3f7034f68f272ca8f66bb2f9f2aaf1a20a5a03f254da58698fa342731c70c3ccc40e88aac2edee4c7f59c6ba43021e91424b3056db56ded0c7493d8a3802759b905bb747cbebc7a0af3f570f89f7e1bd00b1c51") socketpair(0x0, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0xab, &(0x7f0000000240)={0x0, 0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bcsh0\x00'}) recvmsg(r4, &(0x7f0000007280)={&(0x7f0000006d40)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000071c0)=[{&(0x7f0000006ec0)=""/235, 0xeb}, {&(0x7f00000070c0)=""/138, 0x8a}, {&(0x7f0000007180)=""/1, 0x1}], 0x3, &(0x7f0000007240)=""/5, 0x5}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000072c0)=r6) r7 = socket$kcm(0x29, 0x0, 0x0) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000480)) mkdir(&(0x7f0000000080)='./file0\x00', 0x4) socketpair$inet(0x2, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24}, 0x3, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000002e80)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0x50, &(0x7f0000000e00)}, 0x10) socketpair(0x0, 0x0, 0x5, &(0x7f0000000580)) write$cgroup_int(r2, &(0x7f0000001680)=0x6, 0x12) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={r5, 0x9, 0x18}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='pids.current\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) recvmsg$kcm(r9, &(0x7f0000001500)={&(0x7f0000000380)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xa, 0x200000000000023c, &(0x7f0000001600)=@raw=[@jmp={0x5, 0x0, 0xf, 0x6, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffc}], &(0x7f0000000300)="00100000", 0x104, 0x1a, &(0x7f00000015c0)=""/26, 0x41000, 0x405, [], 0x0, 0x9}, 0x89) 12:31:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 12:31:26 executing program 1: clone(0x80003ffc, &(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000007c0)) 12:31:26 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 12:31:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) unshare(0x40000000) 12:31:27 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x0, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r1}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59c) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0xa64) socket(0x800000000000a, 0x0, 0x0) [ 413.792559] IPVS: ftp: loaded support on port[0] = 21 12:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x1, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r2}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000280)=0x9, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59f) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000400010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b1129be3d0a439eff36e833fd74ae47b448d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202255fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e508ef261aff03a72021b6011f6ff05f6070f0bcb6675cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abe346a443d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b07372728d2aabbb752eb506219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e65939b23a0f84c837a71633aad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3948f04ac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fd2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b78f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f24e9921c3fc4636f4fb616d5b871cbdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c592beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a40437d58d"], 0xa63) socket(0x800000000000a, 0x80005, 0x0) 12:31:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0xffffffff00000017}) 12:31:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) unshare(0x40000000) 12:31:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x0, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r1}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000656e2629233ad9e41e16020000006f000000000000000000f7ff00000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc825d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713f3ccd7a0f1572c2cfeceaf21bfb67974157e7ae710510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2c8d91d510485793916f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f9cf000000000000000000000004000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000008f00000000000000000000000000006228406d017cd2673f000000000000000000000000000000000000000000000000001e100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f000000be0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1f8000000000000000000000000000000000000000000750000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000c7f5da3addb7aecb5f14a6b9e5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000a58400000000000000000000000000000000eeee0000b61a000000000000000000000000e1ff00000000000000000000000000000000000000000000000000db00000000000000000000000000bb4243dbcbc2188b0017487b2e533a58643fe24b175f8e919e52849e39389043525d3ddd494ae985e53468473c711971a0f1c6201ef789867a6a6a43da1331e65f4e1a7c88aea52f23a6494510e240ed0b839a8ffb1e95afe210cd60467c1192a1c88027aed995e0b380cfde5b43203edc98da95e2a230873df201f1d2c5b9afa2a163e85dd75b2733d7061889089388ca552942e1daf09ced676e51bd8ba981961894ffe8d0e85d782c0600000000000000fe5abb39f25bb1f812c500f285487e56edcb8510734a83dcafa6a923cef1e551678428538ae08717b4de1baed7c514371d5d820d13f5f718f234868d2c68b030244946fc9cab42fcd8f9d138c29b6b717e76ef627034e541ef45445de27fae4ae3361f5a2a193bb9e741d8b0fea5a77e46d132d5b012892e3a65650792f2199bace5a7a8fe50796838f518e43dc7f3eae6500d30860018cf70545279b15fee030dcfe73d1cde744e7bae6daa1c4bf79d40176da22f5340d99072c8e17cbaea4840836e0439ff61eb9c0900dd00000000000000c39e7b20a7694e2435a68bf2c057d9f05380cfcb4e0180000000000000f5f45f08f5a6f8b5effeedbb603c9a2803cce157cb815614936f1071e8ede8752d46f8b6e06d3f1dbf32bee1e12ae931face38e3ea541b1582919d7c300a1b48d500000000000000000000"], 0x59c) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0xa64) socket(0x800000000000a, 0x0, 0x0) [ 414.812395] IPVS: ftp: loaded support on port[0] = 21 12:31:30 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xb4) 12:31:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) keyctl$assume_authority(0x10, 0x0) 12:31:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x1, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r2}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000280)=0x9, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59f) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0xa63) socket(0x800000000000a, 0x80005, 0x0) 12:31:30 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x1, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r2}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000280)=0x9, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59f) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000400010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b1129be3d0a439eff36e833fd74ae47b448d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202255fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e508ef261aff03a72021b6011f6ff05f6070f0bcb6675cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abe346a443d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b07372728d2aabbb752eb506219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e65939b23a0f84c837a71633aad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3948f04ac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fd2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b78f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f24e9921c3fc4636f4fb616d5b871cbdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c592beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a40437d58d"], 0xa63) socket(0x800000000000a, 0x80005, 0x0) 12:31:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x1, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r1}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000280)=0x9, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59f) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0xa64) 12:31:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$void(r0, 0xc0045878) 12:31:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x14) 12:31:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)=0x2) 12:31:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)) 12:31:33 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsync(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) 12:31:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)) 12:31:33 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:33 executing program 4: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000340)='./file0\x00', 0x10001040, 0x0) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/234, 0xea}], 0x1, &(0x7f0000003b40)=[{&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/205, 0xcd}, {&(0x7f00000008c0)=""/185, 0xb9}, {&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000003a00)=""/152, 0x98}, {&(0x7f0000003ac0)=""/109, 0x6d}], 0x9, 0x0) tkill(r0, 0x1a) 12:31:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in, 0x8, 0x1, 0x8}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={r1}, &(0x7f0000000600)=0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, &(0x7f0000000340)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000940)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000440)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2b, &(0x7f0000000280)=0x9, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x59f) write$binfmt_elf64(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0xa64) 12:31:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) sync() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x408c5333, &(0x7f0000dc5f98)) chdir(&(0x7f0000000000)='./file0\x00') 12:31:33 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=@md0='/dev/md0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000440)='nodevbdev\x00') 12:31:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)) [ 420.120197] sysfs: Unknown parameter 'nodevbdev' 12:31:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0)=@md0='/dev/md0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000040)="7379736673402dfed518c29ca88d5039b8e0bd7e6c528325381b0979005ace8343837797a4e0ed71fdf1fc43cfced7aa55b3dfa29c98e67d0ffdb399e0feb2c329b3560e72732c2d90", 0x1800, &(0x7f0000000440)='nodevbdev\x00') 12:31:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000008, 0x779}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)) [ 420.173745] sysfs: Unknown parameter 'nodevbdev' 12:31:33 executing program 0: mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) 12:31:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x3c1) 12:31:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 12:31:33 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [], @multicast2}, 0x0, 0x1}, 0x20) 12:31:33 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080)="af", 0x1) 12:31:34 executing program 1: munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0xfffffffffffffe54) 12:31:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x800005) r2 = dup3(r1, r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x7b}) write$UHID_INPUT(r2, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) 12:31:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffff58, &(0x7f0000000000)='em1*!selinux\x00'}, 0x30) 12:31:36 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x2001, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)) 12:31:36 executing program 5: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) r1 = socket$inet6(0xa, 0x20000000803, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r2, r3, &(0x7f00000000c0), 0xe6) 12:31:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:31:36 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0xffffffffffffff3f, &(0x7f0000002480), 0x100000f3, &(0x7f00000024c0)=""/206, 0xce}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip_mr_vif\x00') preadv(r0, &(0x7f00000017c0), 0x1fe, 0xf0ff7f00000000) 12:31:36 executing program 0: syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x222, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7ffff}}}}}}, 0x0) 12:31:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) 12:31:36 executing program 4: dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:31:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000100)=[{0x8}, {}]}, 0x8) 12:31:36 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:36 executing program 5: 12:31:36 executing program 0: 12:31:36 executing program 4: 12:31:36 executing program 1: 12:31:36 executing program 0: 12:31:36 executing program 5: 12:31:36 executing program 4: 12:31:36 executing program 2: 12:31:36 executing program 0: 12:31:37 executing program 1: 12:31:37 executing program 4: 12:31:39 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:39 executing program 0: 12:31:39 executing program 5: 12:31:39 executing program 2: 12:31:39 executing program 4: 12:31:39 executing program 1: 12:31:39 executing program 2: 12:31:39 executing program 5: 12:31:39 executing program 4: 12:31:39 executing program 1: 12:31:39 executing program 0: 12:31:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$inet6(0xa, 0x3, 0x7) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 12:31:42 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:42 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@local}, &(0x7f0000000240)=0x14) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r2, 0x0) mmap(&(0x7f0000f44000/0x4000)=nil, 0x507000, 0x1000007, 0x2013, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)}, 0x10) accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000080)=0x8) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) 12:31:42 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x200001) 12:31:42 executing program 1: 12:31:42 executing program 0: 12:31:42 executing program 4: 12:31:42 executing program 4: 12:31:42 executing program 0: 12:31:43 executing program 1: 12:31:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)=[{0x10, 0x29}], 0x10}}], 0x1, 0x0) 12:31:43 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = inotify_init1(0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) 12:31:43 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) [ 429.751865] audit: type=1326 audit(1540729903.218:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13164 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 [ 430.520343] audit: type=1326 audit(1540729903.988:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13164 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:31:45 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:45 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x0, @remote, 0x0, 0x0, 'wlc\x00'}, 0x2c) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000200)=""/110, 0x6e, 0x0) 12:31:45 executing program 4: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x101, &(0x7f0000000b00)=0x0) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)}]) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x8}, &(0x7f0000000ac0), 0x0) 12:31:45 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='L']}) 12:31:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 12:31:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x4000000004) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 12:31:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) close(r0) dup2(r0, r0) 12:31:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x1000000006, 0x200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 12:31:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f0000000040)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) 12:31:46 executing program 4: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x1, 0x2, &(0x7f0000000080)}) 12:31:46 executing program 5: 12:31:46 executing program 0: 12:31:49 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:49 executing program 1: 12:31:49 executing program 2: 12:31:49 executing program 0: 12:31:49 executing program 5: 12:31:49 executing program 4: 12:31:49 executing program 2: 12:31:49 executing program 5: 12:31:49 executing program 1: 12:31:49 executing program 0: 12:31:49 executing program 4: 12:31:49 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 12:31:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 12:31:49 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000140)=""/185, 0xb9, 0x0, 0x0, 0x2cf) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, &(0x7f0000000100)) 12:31:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4, 0x0) unshare(0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e1000100e00000011af50fc89e308a1ff3d66aba8b590fca102da753936d9305afe00b546dc96e45a081118f090001000000000000f03c4b8fc964e4098a72cc8ec007a0f97b730ea1654b0f52c60fa3c38116c4f5dd47bf19018757d163c09fe6639e20e2656c19fbdb7b5ad79a2007ad1b85cf8ba8f180fa739deb5e331f37feca54bdf4920c2f737927ae9e440e322524f78f5f82048afdc3aefa8ff8aacc3ed245"], 0x1}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fstat(r0, &(0x7f0000000380)) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000600)={0x4, @broadcast, 0x0, 0x3, 'lblcr\x00', 0x2, 0x206, 0x40}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000340)=0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001ff) ustat(0x2, &(0x7f0000000980)) restart_syscall() syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x1) 12:31:49 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x400) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000200)=r2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)=r2) 12:31:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xc1b) 12:31:49 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:31:49 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) socket$inet(0x2, 0x2, 0x6) 12:31:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:31:49 executing program 1: unshare(0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), &(0x7f0000000340)=0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001ff) ustat(0x0, &(0x7f0000000980)) getrandom(&(0x7f0000000040)=""/59, 0xfe63, 0x0) 12:31:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)="6370752e873dd871007caadebbdbcd2a99b74677ed12d798707cb591d65c11e0652f1ccfea9481e173a6", 0x26e1, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0x14) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x61bf, 0x1c2dc0000}) write$cgroup_int(r0, &(0x7f0000000300), 0xfffffe8c) recvmmsg(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x0, &(0x7f0000004700)={0x0, 0x1c9c380}) 12:31:49 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) 12:31:49 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) 12:31:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r5 = getpgid(0x0) setpgid(r4, r5) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000180)=[0x0, 0x6]) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$packet_int(r6, 0x107, 0xb, &(0x7f0000000280)=0xffffffffffffa254, 0x4) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 12:31:50 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000002c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r1, r2, &(0x7f0000000140), 0x7ffff000) 12:31:50 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 12:31:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000200000200d0310000000000"], 0x18}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000200)}}], 0x400001f, 0x0) 12:31:50 executing program 1: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040)}]) 12:31:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:31:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:31:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:31:52 executing program 5: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000040), 0x0) 12:31:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000680)="2f65786500000000000409004bddd9de91be10ee9ed554fa07424adee9cbc699ec2ca576e50000bcd7a071fb35331ce39c5ad0cf73770bd4246847a1914e4fb0aa9b15eaa94bcd0e700ed63b44338e84ad4ec2f11f6f2adb8dc2fdb18231446f43142ebe700b2231e8fceed6b22a373c9409675ac8d0b53033123fb3037d66241aafe0f880e7a51d1b036ade315a544d2581fe8653d0cff54369df8c2fce21dcb1cb965669f9a75345ac3479cd51dc7de364c9c272c83ed9e666ca25aad2e7a26e3d6c62d0f8b9065cfca311c06d0744db265aa0e486707c51fd108c0c6ccae6ff42274af94d30fce8836ff9d00bdd") ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x81, 0x3, 0x0, 0x1, [{}]}) 12:31:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f0000367fe4)=""/91, 0xfffffe63) [ 439.117123] audit: type=1326 audit(1540729912.588:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13337 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:31:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r0, &(0x7f0000000440), 0xffffffffffffffdb, 0x0, &(0x7f0000000200)={0xa, 0x4e28, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) 12:31:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400060000827047315c39e51b0000000000000014000200fe8000000000000000000000000000aa2c5ca341d891870b6ea4ba5998cd644e03d57490e0eb0af6bf72650c92d47901e1a1d0ec0614"], 0x1}}, 0x0) 12:31:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 12:31:52 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:31:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x705000) setsockopt$inet6_opts(r0, 0x29, 0x8000000036, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 12:31:52 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x44040) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000080)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) [ 439.878637] audit: type=1326 audit(1540729913.348:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13337 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:31:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in, 0x2, 0x807}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x5a, 0x3, 0xfffffffffffffffa, 0x100000001, 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$llc(r3, &(0x7f0000001740)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001780)=0x10) 12:31:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$inet6(0xa, 0x3, 0x7) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000b82000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 12:31:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:31:53 executing program 0: 12:31:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) unshare(0x8000400) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x14) 12:31:53 executing program 2: 12:31:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:31:53 executing program 0: 12:31:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:31:53 executing program 2: 12:31:56 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:56 executing program 5: 12:31:56 executing program 0: 12:31:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:31:56 executing program 2: 12:31:56 executing program 4: 12:31:56 executing program 5: 12:31:56 executing program 2: 12:31:56 executing program 4: 12:31:56 executing program 0: 12:31:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) close(r0) 12:31:56 executing program 2: 12:31:59 executing program 5: 12:31:59 executing program 4: 12:31:59 executing program 0: 12:31:59 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000400)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2b) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, 0x0, 0x0, 0x0) 12:31:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) close(r0) 12:31:59 executing program 2: 12:31:59 executing program 5: 12:31:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 12:31:59 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mount(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000032ffb)="0300736d00", 0x7ffbd, &(0x7f0000000280)) 12:31:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utimes(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)={{}, {0x77359400}}) 12:31:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) close(r0) 12:31:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:31:59 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef3341c611d396d8e5b1348624e35ee83ef6f22e847a723431abe21bfc8be1a9c3350094ada5a1c8541"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:31:59 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) [ 446.085109] attempt to access beyond end of device [ 446.093577] loop4: rw=2049, want=130, limit=112 [ 446.166326] attempt to access beyond end of device [ 446.171396] loop4: rw=2049, want=130, limit=112 12:32:02 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) syncfs(r0) 12:32:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000040)={0x0, 0x1, 0x2, &(0x7f0000000080)}) 12:32:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000140)='./file0\x00') r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 12:32:02 executing program 0: timer_create(0x0, &(0x7f0000000440), &(0x7f0000044000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x20000000) 12:32:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:02 executing program 2: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, &(0x7f00000006c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@mcast1}, &(0x7f00000002c0)=0x14) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, &(0x7f00000002c0), 0x1d3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) [ 448.845810] audit: type=1804 audit(1540729922.318:54): pid=13526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir030250635/syzkaller.JKFi0r/271/file0/bus" dev="ramfs" ino=50542 res=1 12:32:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 448.974642] attempt to access beyond end of device 12:32:02 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) [ 449.012919] loop4: rw=2049, want=130, limit=112 12:32:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:02 executing program 2: socketpair$unix(0x1, 0x2000000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='p', 0x1}], 0x1) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") 12:32:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:02 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) 12:32:02 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="24000000010407031dfffd946fa2830019400a0009000100161d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:32:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 12:32:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) [ 449.484691] attempt to access beyond end of device 12:32:03 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00') quotactl(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, &(0x7f00000000c0)) [ 449.511700] loop4: rw=2049, want=130, limit=112 12:32:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:03 executing program 2: lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0xe49}, 0x28, 0x0) r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0xfc77}], 0x1) semop(r0, &(0x7f0000000100), 0x2d) semctl$IPC_RMID(r0, 0x0, 0x0) 12:32:03 executing program 0: r0 = socket(0xa, 0x802, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 12:32:03 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ptype\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendfile(r2, r1, &(0x7f0000000040)=0x2, 0xe0) 12:32:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:03 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4000802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f00000001c0)={{}, 'syz0\x00'}) 12:32:03 executing program 2: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000000000)) ioprio_set$pid(0x3, 0x0, 0x0) 12:32:03 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x9}, 'syz0\x00'}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000002c0)=ANY=[@ANYBLOB="f938260b3c3ae64024d084d786002f6de7aa69c2c7a15127f0cae471193979f7193304a43dcfd1e1b43f6c6e2bce243189bbd26794134f7ca3073314f80a000000000000e68e719bc1e6cafb9e000100000000000000"]) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x0) [ 449.909340] attempt to access beyond end of device [ 449.925939] loop4: rw=2049, want=130, limit=112 12:32:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) [ 450.013379] input: syz1 as /devices/virtual/input/input27 [ 450.060690] input: syz1 as /devices/virtual/input/input28 12:32:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)) 12:32:03 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="28000000040000000000000000000000000040000000000000000000000000000000f3ffffff0000"], 0x28) 12:32:03 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) dup3(r0, r1, 0x0) 12:32:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:03 executing program 3: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:04 executing program 0: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x6}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) socketpair(0x11, 0x2, 0x7, &(0x7f00000002c0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="b451c1fa39c8c377fc7ad3aeee001f129d4ab26aa7bfb11a47f0b5397d1d3fa5a9c612df73570a85d1897fa4168a021b8cc30a8c59fa8ed9124bbb0b3aa798807c8da2a04997848d4a417590e647aa3e7cd4311c867bc65b8cf52c444a295a97227ef52be6d5f472f705d7beea35a254bfe93b39f2f0943449b0c1e1791831bbb2321e5a5c468270e261b65a9253c44866a01ff0dee91f0db1413071b6edc03034681516e69a19edab269ba8fdd250a63573ee06dfa51a68a7f135e4f2aacc094cd82684b00394408e91cd47bcb2c14ec2f62a18fac94a0179139f38b63df58f4a3dbfff17a12322300cf54279a1c3b7948dc76614abfcebde95f102b491e30f39c1960c8a1c3fda67bf799530b5bb5d3cb9e9704092d204eb9aa7afab5589eccb430168b805be3b7d1b1ce1ca5c52cc5469e6a29863252ffd796c32cd432bb8f3ca46004be259f53f6159ea0e9247c2ffe3dde544db16bda81861d9b05b934332d6aeebcb0de6c884b8b884fa585d80cbe961f461f216da968fd6a1f8baededd7ea43bd218aae4d71c8b7b3c46d0170dc49cd873f315e47e797359f12140bf1740111eb1e2f6512a260e45c15621540c1097b2a2a9f0b6b9a04aac17e2f424f6abf6ce2d9a3b09b7966b8230b3bc4a15dd779cade271dc001372e1e02865c443468ce8fef97de9076df2355f3b7690ef3290fde7901195d2180194c02f81fea30ee73aa9a3b05982a18356f001741b22bf9639d2c13a4a46f5cb97472ca3302689f2dcda6d10c61751911ffc8cad0a4f0c22b9bd61113910ef069162e3806045db5bdf5c6d3fcb989ac2cb77f4c2d83ace89c3caed5b1b5f0238b7e57e880fb14c0de16ad085312377bc650d9d06e308de44156ab7d272eb939f236a13afd0646dec9d54c6c78e7631534ec2cfad67ab0e2779db7b064c0992cd3f15a5ded7efd7fea171fc3bfa8895c281ce6bc5287c5a51d9767e48bf107cea52f856ff937bfb73462ff1f12037071c394f720830239a5f85fd26dd8fa4b3b47313c3df777d47b31d61160980021b792c172c7cec2e55458ad780ea590d2a650da42b4e79d76093ff67993eec584bc29161e529e545e1ef45350b5a4ac8960fd2719cd208d8a527d13a0c05333353ca376273418f6f993b72897f0d386741451c83dbd5a1ae2b0c1433cf934439d0332e3b7f2f09b92251bd1a0c3beda4f7bafe049625c674442f52658edb0187469b9bc331246bdb5fd301ea8800c3eadde2b72a562bd3a738e4df95b69b8a54ad61abc93f40751702c816238729b7660d048012f57b3ca44f6e3c27f10a6a321f217e283a120ec61db642ff2358067c1eb35d97879ff855d7491e8a54dad0fa9c052a087e3efc52120ab965415f9a8924613bc4fe50d5aec7c621ae981ba49c202ee0c9e3eadd3c1a20270076fa87f975756a5d57db843c3f73f76dddd2047f1b602653c57f5a9a7f233699585fe89ca2e7ea74560a20813ca01cef700501e1241830962dd6f7d64041c5c3abe80546b645ba6fc83794c5ec822a7bf768149659769457fa6cb4d44f28f3b44565655c4b64f35dbd7dd208906d0b60da65be8f384eab0f78a148860a7e0213afd921f752edd2b866715ae5ce3cbd7f0b4e18257beddf33d7606adfc9f2a230b6efac696b4ec49f599f964062d214835352b25228c88c74e5dda5fb2e133919831c596c7ad716ecb049d34ad3ff112374648b7e3883b0ea9e7aa8d699fca3c65cd7c67489bf7f4da84e936a4eaf5f802ccfd5dbec7333fb7265fbd3d631a1acb4d41537695f449698cbcab52abb92234c71832dcbf733d6228057ee8e08fa75b68ce271596e588d5358fb460dc543289a7896ffb8dc375c7c962dbad0c29d33bcffa9b595a73c0475a5543f896da2dbdd3bea20cfe25cd6eca465ea0b6759ab5650753f0b571acf96643425783e808ce331cda11eecd6e87792b3b3f7e59206bb253e548f1ab037d18179fdadeba81e28e30c75c18a405609e5e0e41140b63c8c33a5696a8871ab09791e85ebee2671c3fb298cac897a43ce5358b8a22ffc20bf30f7ba1d26dd12aabc51fa2a8088b7e484a3aff806aa48111c25231de5e99924484f5960efae17167211d1cb69925a61e72c63d63588ae8e2d55a62254c2e6a9e435e2d07c863976af0a4b42026992a71f163468d7778eb89781e87b7dbac57b42fda1d1198ecb662ad63f27ac934f4097778e868376d6bc5fbb0d50c72a84882501cb60e4a125bd5244f5810261254f519bc9e486611fef42d16e5fb06e29d665256f962a3fb4b270e0955e02d5277d5acf80af31bae03ef10eb348aed7d8ecdbde609909513cf2a813f05404c5120bbd06526ccfa0ee1ec957ca4f63af53f63e29c2cb7bfa088d9ebbcd764bbcbd94a0da0ee00ed06c17ce5d5dbedfa26bd7395774f1afd727b1906bf915ad80d6967dc02ff8b82645b3e3325c682ca42881068bf69ddacf00c96bf1e35fdb54e4e74c6dcb47402375777151dbc46d9a494a1e5087a29ad4d24e246dc87846d826396c466ebb5cf17c172caa385e7b1bfcbf007b811b7fc437c88be265e78c912f2a06c1262582042d360ef1702bcb72f017170c014df5c12f155fb9f9bcb04757546df0fe3ea4e0138ba9261b3722af26096498f529291d09dbba080c29e1d3ba9b6982e156d9f062450a5f6eae48788bb46fdc18ef07bf1e392a370c788bd7625173db873cc065ddc32062f4c2f1487201b572ac09a8d4168362f8e127f24f8c8fe05ef9a51842d6bce388c734cfe7130e09efd5660ace76d04be3c58c3f6c85ad94ea6651c8985eca654453deb7a43bfbc4c25f4ab8fff7c73de0d048103acd0b9d8c4d80de20c8f6aa5013340607d1289ca5d843b8fb3cee86073db9eadf6e44639b0d111cde932596dd1fe87477976731165385886f9c286916c4b8d733007152b07397b5c7e543fdbf004bc125c56769603215c3991a9f47e0ccd9be25d4d7337ae236c6945f4c7af5ec4e7f96f14b9a40d16ac4ee66b295f4682da0c556351fa8f1dca0b7c5a16d927389d4a75efd890b540ae595668d1b39771b3197c9232bfe52ac55de7b7df43797d3a3106f97634f4c6bddf613201825e3f7342697d3ad8f67226ab8b36964d158a1961c15e1b54fe513e4ccf5479d88d6da09f7647dcd9a8f1710eb0d67deff3c74640849617bf5737fa2f59b06ee65a868a3d9bff902273f2eeba70ec12ef82043e77430fb355047b97ae6be67b267c65ef0c3ac81f29b85d7242502fb3be3b60d5c56b6a79be88cacf8449023818ff2bd794b0e0527611f1babde238f5ac58ef16d0fb4170d594e5e56c6814145e10edba0b60d01c534a7724939109bf123a52a73f76ff337cb1d8d1ba8d273aa337e332695d05d91f90c2e5c30f5836cce42e3499d8456b090c461a0d8805183d37a002b03d155cebf20e61f02db758e9b55428e31aed03f3d4c486d74f3cb37ede4481afa74cd88517de15bf181cc56236d16a65a200c7c92b8903f74947d71710b3a7540b77f64a696cf1447020f970c272f5295abd449e67996d63f1437aeeb77b84bc669cd4d033233d580c8bb69d32899a125eb756bbe20d7f3023a71ca101012936404115a3f05600c41a3a1e079ac964613c1b661d7f180a5aaf55eeef17ff569e2045b81f23a5545571f0577e56eba61b546c2c786abd80ba3a551603b0d9f3c2a1b51a34ada1c8f2fcd3ba1691514e381de99b79d88607d7627a6a32edd9009d24bd39e34dc3a6baece7950ca2be2aabdfd1173f57e949de8695e9a31772a164a1ed71734288a29862c7e00841f3b25e06b4ac5f0c4e48f39a223564b6513686308e25b117412ecccb16eb1243c63ef1c460f1e69bc32cfb2b417b0ce510debfc8f3fa57e6f59480516020ff4faefe1d43e408ab8b17c647ad42d391e2768b71bb8d7d2ac82df7541ad186f46bf1ad8ab5dcd0c897f1029e8b0d0d14dda5cb049098904c2d09b80b67b9f5312b1a63eb955b9514f42fa3d0199412ac743a69daa819f40e0ff126bb312d45e1b75d3fdb3537050f571ed5ad05dfd6b104e028421ae48f9f6a5977f0a74c449808ef5037d2550b1fb0445033d877fa377b815e88003d1354d74ac858071538a693c39f6c079d7bc1ad1d48efbd25ff95387952db8b3247293012a62c167b4241922e439da612c2055828f40bad7625f1f6fcfe132f2307f6d631e2d9fd593470b75d91ad85630ad689e8fbbbf406ba22f575309cf79d8082a981873c53610d603a19aab60434fd069d01031c85699d589f515e3c33a0d0fabaec08f3fe062b88e50a59a65fbe8051ee4f054690cd4f6538eda055d78e62e8a7acb01aba507043e6470b6e045761bbd5310002523fd005e5d36e6f638ba6ff80e57413f01205d51e6964c498ecb85ca87c5418feac1bfc5d3b1aa677090739339476e138bb7d093a9ff286f9709f71ace98a9a98c3ed469a31269178e8f8fb75b1096a6ef67e9400dfe29aa4665a926ce2a578adf60550a5e961bfb1c0bd9f670272b9df14a35681de95a648b7aab2e6b0cde0812d7ff21b86f0e552c04670a7201af0de678cb64244341cfdcb9ddf7dde084454678c224ab7fbb56bbe47589a2fa3e7a28a135ce02021106d0edcd86bf2600dd23d0425d2dc7e4ca476a7408e409965e36572df4c52b064f0dfffdd4902e0a215346ae2d91c918a34857097921c1cd15d7bdf932b76de65b5c974feabd3a8db5c365c5554c406d462feae48b06ab25262733e20b3e4f0b2546b373117462d2156c3a4e74baadb1f511517818a9fd06eea85a087ee0bc6d08347d19e2a363201ee46d05aaf06a3831f89bdcd7a65f4f2548df41860fe1dbbec0efced2a188122ff80a3f2ce6aba8ab499756a83939dd6a5f3d8bcade5c597f6b7d014bd3caf7798b5c5a837aa21af8bd757140c5ea1742dc6c688e16cbdc33a5edff7b4f754f368d89f0838a0cd3559101f74294536105a8c0e1fe5e9240352e780f575e21e600da21f4bd633fcad42b5370dea121f7789147e97531679245e677b0068834c46db085668db4b65df88f7d6d60e2bdbddfc49a522406ac916ee3f5bf9808dd810d8179dd5095b12d503364b1d7f3310fb3d6996976fff7b0b085f054c49b38637bcffcbde71122024522465f11e1f3a2c27824c89f2a4513bded26706d090e6603b39ead8748e609e5ee52f784bdb51ed525f8ab6a1ba75a8da804493ff7b6746312593d9ebcf6d8046930e7cd29e2c72340455c15c322e53776cf51de6d8ac9c82c1f036f8c88c3ca0fef003a8341de83316bf00472a301a202b4803fe96f93a371b0c60ba07fd36ab335955a8bd62c2e9e66c9fe81a3b719bb4a38c57cebee4065fddb30947a8d5c30f86e7f7e89bfe75b0f8a12a6bda4464ed681ebeb8f3a0a409079a1e44fbcce5a5d7222083742aae68bf99ad106763aa25d653b416702f45886cefd93c1f34d53597f62923757b9aeb737ef52a6b80e4e00eb610e041e239428e6973ed4b1f81b09f948de3186a9d2ede1730217710035101aff3ffc24f60926426a6832e85c04f69f923ec6243db1bcd154f53f41667d3e4db4cf3b7ad23aeb4df7ba88ed7a789c9f5fdb1cdcaba704546bddc81c1eb7dc426c300c08236d9eca16c37527f688eed80bdb64696212248de41bf980f84729d1b3ada360c2f03706f07ebad50a4def8c369f2894dc72b336d5ed7c2ea45a820846d2adf62438dd93b0aa2a5ef0b111e2620f4a564d7de1c8a99cede9e8d93234424a66034b43b58304b", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 12:32:04 executing program 3: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:04 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f00000003c0)="a0", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000400)="cf", 0x1, 0x0, 0x0, 0x0) 12:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:04 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a500)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002bc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 12:32:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:04 executing program 0: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x6}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) socketpair(0x11, 0x2, 0x7, &(0x7f00000002c0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(r0) 12:32:04 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x1e628281cc4f499f, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8004}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000180), 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/52, 0x2}], 0x1) 12:32:04 executing program 3: 12:32:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x8080fffffffe) 12:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) close(r0) 12:32:04 executing program 3: 12:32:04 executing program 0: 12:32:04 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b3fdc)) write(0xffffffffffffffff, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r0 = syz_open_pts(0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) 12:32:04 executing program 3: 12:32:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) close(r0) 12:32:04 executing program 0: 12:32:05 executing program 3: 12:32:05 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 12:32:05 executing program 2: 12:32:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000), 0x10) close(r0) 12:32:05 executing program 0: 12:32:05 executing program 3: 12:32:05 executing program 0: 12:32:05 executing program 3: 12:32:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) close(0xffffffffffffffff) 12:32:05 executing program 2: 12:32:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @ioapic}) 12:32:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', &(0x7f0000000240)=""/163, 0xa3) 12:32:06 executing program 3: r0 = socket$inet6(0x10, 0x400000000003, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 12:32:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:06 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') 12:32:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 12:32:06 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)) 12:32:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x40000800) 12:32:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001500add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) request_key(&(0x7f0000000540)='rxrpc_s\x00', &(0x7f0000000580)={'syz'}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffb) 12:32:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/135, &(0x7f00000000c0)=0x87) 12:32:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:06 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540), 0x0, 0xfffffffffffffffa}]) 12:32:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "959848508302fec0ff460a56e50138e89ed0dd2960591f18330e3af6ff93e260", "45bb782de2e41436fdee560d399c69721c900272c8d95ac01e24c422580cbeda", "3b2f25f11ddae3601cbb8c99722a4fc1e2628b3b083c230da778bdfde6f566c9", "1e4c85f0e37119f73d62db49fbf053088f884b44ff5cbff2ac935e9abd2fc3fa", "b7073bb2cf4894d5ac5f45c5e0542d14fa58197bd6f63a504ae783c0c59f0e32", "c9f0504f905835863d75fcba", 0x0, 0x0, 0x0, 0x100}}) 12:32:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(0xffffffffffffffff, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:06 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f00000004c0)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)=""/123, 0x7b) 12:32:06 executing program 1: socketpair$unix(0x1, 0x2000000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 12:32:06 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x1) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 12:32:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000680)={{}, 'port0\x00', 0x6f, 0x0, 0x0, 0x1f}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(0xffffffffffffffff, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) 12:32:07 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) prctl$setptracer(0x59616d61, r0) 12:32:07 executing program 3: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) 12:32:07 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000340)={{0x2, 0x0, @local}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @loopback}, 'bond_slave_1\x00'}) utime(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000640)=""/181) 12:32:07 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) 12:32:07 executing program 1: 12:32:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(0xffffffffffffffff, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:07 executing program 0: 12:32:07 executing program 3: 12:32:07 executing program 1: 12:32:07 executing program 0: 12:32:07 executing program 2: 12:32:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380), 0x0) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:07 executing program 3: 12:32:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef3341c611d396d8e5b1348624e35ee83ef6f22e847a723431abe21bfc8be1a9c3350094ada5a1c8541"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:07 executing program 1: [ 454.168650] attempt to access beyond end of device [ 454.185467] loop4: rw=2049, want=130, limit=112 12:32:07 executing program 3: 12:32:07 executing program 1: 12:32:07 executing program 2: 12:32:07 executing program 0: 12:32:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380), 0x0) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:07 executing program 2: 12:32:07 executing program 3: 12:32:07 executing program 1: 12:32:08 executing program 0: 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380), 0x0) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 454.545723] attempt to access beyond end of device [ 454.573438] loop4: rw=2049, want=114, limit=112 12:32:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:08 executing program 2: 12:32:08 executing program 3: 12:32:08 executing program 1: 12:32:08 executing program 0: 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e45", 0x26) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:08 executing program 2: 12:32:08 executing program 1: 12:32:08 executing program 3: 12:32:08 executing program 0: [ 454.937716] attempt to access beyond end of device 12:32:08 executing program 2: [ 454.963144] loop4: rw=2049, want=130, limit=112 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e45", 0x26) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:08 executing program 1: 12:32:08 executing program 0: 12:32:08 executing program 2: 12:32:08 executing program 3: 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e45", 0x26) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:08 executing program 0: 12:32:08 executing program 1: 12:32:08 executing program 1: 12:32:08 executing program 3: 12:32:08 executing program 0: 12:32:08 executing program 2: 12:32:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dd", 0x39) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:08 executing program 0: 12:32:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000005580)=[{{&(0x7f0000000640)=@sco, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=""/126, 0x7e}}], 0x1, 0x40, 0x0) 12:32:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000100)={'team_slave_1\x00', @ifru_names='bridge_slave_0\x00'}) 12:32:08 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="49b4775d084ab661b76300976bfcdcdf121a94b64dc4e1c0c678b7bb2d000000000000000000000000009bb9653ad5fbe6ba0c0d0d322d7ddf03cc629dc5ec43babe696afefe0f222711e952034fb31b05d9b857104cb26d8bea0abdc3b90eb41b3e96678d32a0044c7a7fd75fdbad907c4ae2bd6649436a76fbbdaf79c74f028845bbbf22d0e1b227c2f10675e653822ee22e78a8db9393f628710ead919b8e18493d23d860552ebd28fb535810ff888fd77e79cebcb6c11fe3f0f5f2a29a36e6545d6d87a3a263a30c27770061d8ed04cbc462571d0de71563127858c93b7d4ae09970", 0x200002, 0x0) r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x2c, 0x4, 0x0, {0x0, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000600)}, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) 12:32:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dd", 0x39) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r1) 12:32:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a0c000/0x2000)=nil, 0x2000, 0x1000006, 0x2012, r0, 0x0) 12:32:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 12:32:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dd", 0x39) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:09 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef3341c611d396d8e5b1348624e35ee83ef6f22e847a723431abe21bfc8be1a9c3350094ada5a1c8541"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:09 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") ioctl$BLKRRPART(r0, 0x125f, 0x0) 12:32:09 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') prctl$setfpexc(0xc, 0x2) [ 455.847705] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:32:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x0, &(0x7f0000000080)=""/109, 0x6d) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001640), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[]}}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 12:32:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f7564", 0x43) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:09 executing program 2: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) 12:32:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000140)='user\x00', &(0x7f0000000180)='{eth1vmnet0\x00') 12:32:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f7564", 0x43) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 12:32:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x3c5) 12:32:09 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000052, 0x0) 12:32:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f7564", 0x43) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={"74657146a900", {0x2, 0x0, @dev}}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:32:10 executing program 3: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) 12:32:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_hwaddr}) 12:32:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444", 0x48) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) [ 456.955638] kvm: emulating exchange as write 12:32:10 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x8108551b, 0x70e000) close(r0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') 12:32:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={"74657146a900", {0x2, 0x0, @dev}}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:32:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444", 0x48) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) 12:32:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x20c}, 0x20) 12:32:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) 12:32:11 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x8108551b, 0x70e000) close(r0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') 12:32:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444", 0x48) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:11 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x1, &(0x7f0000000240)=ANY=[]) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=.']) 12:32:11 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000002f0000000000000020000100000000000001000000000300000000000000000000000000000003000000000000000000000000000000"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) 12:32:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:11 executing program 0: [ 457.964732] overlayfs: upper fs is r/o, try multi-lower layers mount 12:32:11 executing program 2: 12:32:11 executing program 0: [ 458.011849] overlayfs: upper fs is r/o, try multi-lower layers mount 12:32:11 executing program 1: 12:32:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe", 0x4a) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fallocate(r0, 0xfffffffffffffffa, 0x0, 0x10001) 12:32:11 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@nat={'%at\x00', 0x19, 0x1, 0x1a8, [0x200005c0, 0x0, 0x0, 0x200005f0, 0x20000620], 0x0, &(0x7f00000000c0), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff080000000000000000020000000000000000000000000000000000e8ffffffffffffff000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000090000447e000000000064756d6d7930000000000000000000007465616d5f736c6176655f300000000073797a6b616c6c657230000040000000726f7365300000000000000000000000aaaaaaaaaa000000000000000180c2000000000000000000e700e0000000e0000000180100003830325f330000000000000000000000000000000000000000000000000000000800000000000000000000000000000074696d650000000000000000000000000000000000000000000000000000000018000000000000000000002071277bd86e690400000000eeff010000736e61740000000000000000000000000000000000000000000000000000000010000000000000000000000000000000fdffffff0000000000000000"]}, 0x220) 12:32:11 executing program 2: [ 458.221968] attempt to access beyond end of device [ 458.230478] loop4: rw=2049, want=130, limit=112 12:32:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:11 executing program 1: [ 458.281055] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 12:32:11 executing program 0: 12:32:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe", 0x4a) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:11 executing program 3: 12:32:11 executing program 2: 12:32:11 executing program 1: 12:32:12 executing program 3: [ 458.533267] FAT-fs (loop4): bogus number of reserved sectors 12:32:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe", 0x4a) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:12 executing program 1: [ 458.593220] FAT-fs (loop4): Can't find a valid FAT filesystem 12:32:12 executing program 2: 12:32:12 executing program 0: 12:32:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:12 executing program 3: 12:32:12 executing program 2: 12:32:12 executing program 1: 12:32:12 executing program 0: 12:32:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d", 0x4b) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:12 executing program 3: 12:32:12 executing program 0: 12:32:12 executing program 1: 12:32:12 executing program 2: [ 459.386575] FAT-fs (loop4): bogus number of reserved sectors 12:32:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d", 0x4b) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 459.462904] FAT-fs (loop4): Can't find a valid FAT filesystem 12:32:13 executing program 1: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 12:32:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:13 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ftruncate(0xffffffffffffffff, 0xfffffffffffffff8) 12:32:13 executing program 2: 12:32:13 executing program 3: 12:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d", 0x4b) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:13 executing program 1: 12:32:13 executing program 1: 12:32:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x0, 0xb, 0x0, &(0x7f0000000000)) 12:32:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x1, &(0x7f0000000080)="7f"}) [ 460.266295] FAT-fs (loop4): bogus number of reserved sectors 12:32:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}) 12:32:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(0xffffffffffffffff, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 460.310314] FAT-fs (loop4): Can't find a valid FAT filesystem 12:32:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/210) 12:32:14 executing program 3: stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000003c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000240)={{}, 'syz0\x00'}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r3 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000002c0)=ANY=[@ANYBLOB="f938260b3c3ae64024d084d786002f6de7aa69c2c7a15127f0cae471193979f7193304a43dcfd1e1b43f6c6e2bce243189bbd26794134f7ca3073314f80a000000000000e68e719bc1e6cafb9e0001000000000000"]) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r3, 0x0, 0xa5cc54d) creat(&(0x7f0000000500)='./bus\x00', 0x0) 12:32:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000080)=""/219) 12:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:14 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) 12:32:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "94f6c34fdf7dfa9abb5ab6bedb1deadb968196730455fbc7228c895c2f14af4b"}) 12:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 461.134374] FAT-fs (loop4): bogus number of reserved sectors [ 461.140445] FAT-fs (loop4): Can't find a valid FAT filesystem 12:32:14 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x3f) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x6e) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 12:32:14 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 12:32:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x1, 0x0, &(0x7f00000004c0)='8'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f00000001c0)}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 12:32:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340), 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:14 executing program 2: socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r0, &(0x7f000000ca80)=[{{&(0x7f000000b540)=@pppoe, 0x80, &(0x7f000000b700), 0x0, &(0x7f000000b740)=""/244, 0xf4}}], 0x1, 0x0, &(0x7f000000cb40)) [ 461.434449] binder: release 14346:14351 transaction 5 out, still active [ 461.442066] binder: release 14346:14347 transaction 5 in, still active [ 461.447369] binder: undelivered TRANSACTION_COMPLETE [ 461.455595] binder: send failed reply for transaction 5, target dead 12:32:15 executing program 1: perf_event_open(&(0x7f00000000c0)={0x20000000000002, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x2, 0x22c, 0x6, 0x10000, 0x100000000, 0x40, 0x8, 0x5}, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x7f, 0x5, 0x1, 0xf7d, 0xfffffffffffffffa}, &(0x7f0000000200)={0x9, 0xb20, 0x8000, 0x401, 0x8001, 0x419, 0x3ff, 0x3f}, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x101}, 0x8}) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00'}) 12:32:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340), 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 461.514897] binder_alloc: binder_alloc_mmap_handler: 14346 20010000-20013000 already mapped failed -16 12:32:15 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0xb979) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x80003e20) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000280), &(0x7f00000002c0), 0x8) [ 461.618948] binder: BINDER_SET_CONTEXT_MGR already set [ 461.631156] binder_alloc: 14346: binder_alloc_buf, no vma [ 461.661134] binder: 14346:14347 ioctl 40046207 0 returned -16 [ 461.696509] binder: 14346:14351 transaction failed 29189/-3, size 0-0 line 2973 [ 461.714568] binder: undelivered TRANSACTION_ERROR: 29189 12:32:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340), 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:15 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/155, 0x9b, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, "73797a31000cdf00", 0x35}) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000200)={{}, 'syz0\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x4231d52d, 0x0) dup3(r0, r2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x0) 12:32:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 462.049782] input: syz1 as /devices/virtual/input/input29 [ 462.080353] FAT-fs (loop4): invalid media value (0x00) [ 462.092881] FAT-fs (loop4): Can't find a valid FAT filesystem [ 462.179644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.187366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 463.049048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 12:32:16 executing program 3: 12:32:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x4, 0x0, &(0x7f0000000480)="f27aec43"}) 12:32:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x18, 0x0, &(0x7f0000000440)=[@register_looper, @request_death, @register_looper], 0x3, 0x0, &(0x7f0000000200)="4077c1"}) 12:32:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:16 executing program 1: [ 463.175933] binder_alloc: binder_alloc_mmap_handler: 14397 20001000-20004000 already mapped failed -16 [ 463.189625] FAT-fs (loop4): invalid media value (0x00) [ 463.200497] binder: 14399:14409 ERROR: BC_REGISTER_LOOPER called without request 12:32:16 executing program 1: 12:32:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 12:32:16 executing program 3: [ 463.221417] binder: BINDER_SET_CONTEXT_MGR already set [ 463.227662] FAT-fs (loop4): Can't find a valid FAT filesystem [ 463.244249] binder: 14399:14409 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 463.250374] binder: 14397:14398 ioctl 40046207 0 returned -16 [ 463.297492] binder: 14399:14409 ERROR: BC_REGISTER_LOOPER called without request [ 463.340060] binder_alloc: 14397: binder_alloc_buf, no vma [ 463.367065] binder: 14399:14423 ERROR: BC_REGISTER_LOOPER called without request [ 463.383352] binder: 14397:14419 transaction failed 29189/-3, size 0-0 line 2973 12:32:16 executing program 2: 12:32:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) [ 463.421263] binder: 14399:14423 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 463.442931] binder: 14399:14423 ERROR: BC_REGISTER_LOOPER called without request 12:32:17 executing program 1: 12:32:17 executing program 0: 12:32:17 executing program 3: 12:32:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000280)="bd", 0x1}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)) 12:32:17 executing program 2: 12:32:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:17 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="b55c2d023c126285718070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000943ffc)=0xa35) read(r1, &(0x7f00003fefff)=""/1, 0x1) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fb9000)) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x14) 12:32:17 executing program 0: 12:32:17 executing program 1: 12:32:17 executing program 3: 12:32:17 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x601}, 0x20}}, 0x0) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f00000004c0)=""/125, 0x7d}, 0x0) 12:32:17 executing program 3: r0 = epoll_create(0x2) r1 = epoll_create(0x200000000c949) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 12:32:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00022c2400040000000000"], 0x1}}, 0x0) [ 464.089587] FAT-fs (loop4): invalid media value (0x00) [ 464.128301] FAT-fs (loop4): Can't find a valid FAT filesystem 12:32:17 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x4, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x2, 0x0) 12:32:17 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) rt_sigprocmask(0x0, &(0x7f0000001880)={0x7fffffff}, &(0x7f00000018c0), 0x8) write$P9_RCLUNK(r1, &(0x7f0000000180)={0x7}, 0x7) 12:32:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000000)=""/112, 0x70, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x8000000036, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 12:32:18 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 12:32:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r0, r0, &(0x7f00000000c0), 0x8080fffffffe) 12:32:18 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000740)={0xfffffffffffffffd, 0xc000000000000000}) 12:32:18 executing program 2: r0 = socket(0xa, 0x802, 0x2000000088) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400197f09004b0101048c590a88ffffff0100010600d4ff5bffff87cca100c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b1eef6e8b69e2afd", 0x48}], 0x1) 12:32:18 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) 12:32:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000004b1a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800"}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) [ 465.128537] input: syz1 as /devices/virtual/input/input30 [ 465.152100] input: syz1 as /devices/virtual/input/input31 [ 465.321516] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.335071] binder: send failed reply for transaction 8 to 14397:14398 [ 465.342117] binder: undelivered TRANSACTION_COMPLETE [ 465.347339] binder: undelivered TRANSACTION_ERROR: 29189 12:32:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) 12:32:18 executing program 2: seccomp(0x200000001, 0x0, &(0x7f0000016000)={0x1, &(0x7f00001e0fe8)=[{0x6}]}) 12:32:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 465.549572] audit: type=1326 audit(1540729939.018:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14528 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:32:19 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000080), 0x4, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)=0x2, 0x0) 12:32:19 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/214, 0xd6}], 0x1) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/243) 12:32:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/112) 12:32:19 executing program 0: unshare(0x20020000) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') rmdir(&(0x7f0000000000)='./file1\x00') 12:32:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) 12:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0), 0x24, 0x0) 12:32:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x20) 12:32:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x198) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380), 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) 12:32:19 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000000007) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000900), 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000009400)={@mcast2, 0x0}, &(0x7f0000009440)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000009480)={'bridge_slave_1\x00', r4}) r5 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_RMID(r5, 0x0) msgget(0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) tee(r1, r0, 0x2, 0x6) msgget(0xffffffffffffffff, 0x0) msgget$private(0x0, 0x400) msgget(0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) msgget(0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='ip6gre0\x00', 0x80000001}) msgget$private(0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) msgctl$IPC_RMID(0x0, 0x0) 12:32:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x200008c0, 0x200008f0, 0x20000a88], 0x1a0, &(0x7f0000000000), &(0x7f00000008c0)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 12:32:19 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070") bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f8cc57e4d5504cc19285376b1a9fa4446313c4b2", 0x14) 12:32:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:19 executing program 3: io_destroy(0x0) dup(0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000140)=""/236) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000240)) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000280)) [ 466.294506] audit: type=1326 audit(1540729939.768:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14528 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 12:32:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) [ 466.394056] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 466.426254] kernel msg: ebtables bug: please report to author: Valid hook without chain 12:32:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r0) 12:32:20 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x7ff, 0x9, 0xf6}, &(0x7f00000016c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001700)={0x6, 0x0, 0x2, 0x3, r1}, &(0x7f0000001740)=0x10) socketpair(0xb, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00082bbd7800fedbdfcfc1000000"], 0x1}}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) socket$netlink(0x10, 0x3, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@int=0xda, 0x4) ioctl(r0, 0x82, &(0x7f00000004c0)="cd041d8b180ef04bc9cb5ff424682b6d3aadd2dcf03a033f5f680abec120d6e75a43ee667f349e93b6f0d6b89ca919691ab66ca47cc1b49b42aaeb9561a8e05f34470c37527e3267e20ba4aeeb21fc1891dcd56b9950d61549b8c1c1b5fedf1a3941e13ec32339147a8b95f1b5a756fec2bd3c9c0d8c00c02773a2fadfcfc5be67cd1b9c3b86a058b609f8ee6d") socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = accept(r6, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x800000, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000000000000}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=0xc) close(r6) writev(r7, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x7fc}], 0x1) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000340)=0x7, &(0x7f0000000380)=0x4) ioctl$void(r4, 0x5451) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[]}}, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280), 0x2) 12:32:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clone(0x100, &(0x7f0000009240)="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", &(0x7f00000002c0), &(0x7f0000009180), &(0x7f000000a240)="7c87790ac83e98acce5e907f08cf270c86edae419718ae1899ec854a21ad981c10d86afa7b152f53180cee2d85c075775dd4d606327c223fdaf586bad044dbb12ffe4cdfb15436b84ea9c00b3358a629062ec47bb4f6d8b51fa17d13154e6d4c9e1fe585b015df3ba38e5d571ad03656455272feadec091cf96dc22a564f863ee2b55173") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) clock_gettime(0x0, &(0x7f0000008e40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000008d00)=[{{&(0x7f0000000140)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f00000015c0)=""/109, 0x6d, 0x3}, 0x7fffffff}, {{&(0x7f0000001640)=@nfc_llcp, 0x80, &(0x7f0000002940)=[{&(0x7f00000016c0)=""/67, 0x43}, {&(0x7f0000001740)=""/110, 0x6e}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/241, 0xf1}, {&(0x7f00000028c0)=""/110, 0x6e}], 0x5, &(0x7f0000002980)=""/135, 0x87, 0x9}, 0x1}, {{&(0x7f0000002a40)=@hci, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/162, 0xa2}], 0x1, 0x0, 0x0, 0x100000000}, 0x5c}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000005000)=[{&(0x7f0000002c40)=""/112, 0x70}, {&(0x7f0000002cc0)=""/243, 0xf3}, {&(0x7f0000002dc0)=""/42, 0x2a}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)}, {&(0x7f0000003e40)=""/69, 0x45}, {&(0x7f0000003ec0)=""/13, 0xd}, {&(0x7f0000003f00)=""/194, 0xc2}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x9, 0x0, 0x0, 0x98e1}, 0xca3c}, {{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000005080)=""/71, 0x47}], 0x1, &(0x7f0000005140)=""/138, 0x8a, 0xffffffffffffff6f}, 0x58}, {{&(0x7f0000005200)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005280)=""/173, 0xad}], 0x1, &(0x7f0000005380)=""/100, 0x64, 0x4}, 0x1ff}, {{&(0x7f0000005400)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005480)=""/4096, 0x1000}, {&(0x7f0000006480)=""/230, 0xe6}, {&(0x7f0000006580)=""/41, 0x29}], 0x3, &(0x7f0000006600)=""/4096, 0x1000, 0x6}, 0x8000}, {{&(0x7f0000007600)=@can, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007680)=""/249, 0xf9}, {&(0x7f0000007780)=""/172, 0xac}, {&(0x7f0000007840)=""/112, 0x70}], 0x3, &(0x7f0000007900)=""/27, 0x1b, 0x10000}, 0x13c}, {{&(0x7f0000007940)=@alg, 0x80, &(0x7f0000007a80)=[{&(0x7f00000079c0)=""/41, 0x29}, {&(0x7f0000007a00)=""/76, 0x4c}], 0x2, &(0x7f0000007ac0)=""/255, 0xff, 0xe79}, 0x4}, {{&(0x7f0000007bc0)=@can, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007c40)=""/96, 0x60}], 0x1, &(0x7f0000007d00)=""/4096, 0x1000}, 0x6}], 0xa, 0x40000000, &(0x7f0000008e80)={r2, r3+30000000}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000008ec0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000008fc0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000009200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2f4de21f40f1b64a}, 0xc, &(0x7f00000091c0)={&(0x7f0000009000)=@getsa={0x170, 0x12, 0x100, 0x70bd29, 0x25dfdbfd, {@in=@multicast2, 0x4d5, 0x2, 0x7f}, [@algo_comp={0x5c, 0x3, {{'lzjh\x00'}, 0x88, "bb6cff4bbaba783571b1c758b8e2038ee7"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x4a7, @in6=@loopback, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@ipv4={[], [], @multicast2}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@multicast2, 0x4e20, 0x4, 0x4e24, 0x6, 0xa, 0x20, 0xa0, 0x3b, r4, r5}, {0xffff, 0xfffffffffffffffa, 0x2, 0x13a, 0xffc, 0x4, 0xfffffffffffff800, 0x3}, {0x7ff, 0x998, 0x923, 0x81a9}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}}]}, 0x170}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000003e00)={0x100, 0x4, 0x1}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) 12:32:20 executing program 0: [ 466.803868] IPVS: ftp: loaded support on port[0] = 21 [ 466.844255] device lo entered promiscuous mode [ 467.340631] IPVS: ftp: loaded support on port[0] = 21 12:32:21 executing program 0: 12:32:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df771e0624f492d59e6f635b9d90659f6ad461611b1ffc8edd6ac1375a6ef3341c611d396d8e5b1348624e35ee83ef6f22e847a723431abe21bfc8be1a9c3350094ada5a1c8541"], 0x118) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:21 executing program 3: 12:32:21 executing program 2: 12:32:21 executing program 1: 12:32:21 executing program 2: 12:32:21 executing program 0: 12:32:21 executing program 3: 12:32:22 executing program 2: 12:32:22 executing program 1: 12:32:22 executing program 0: 12:32:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:22 executing program 3: 12:32:22 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x7ff, 0x9, 0xf6}, &(0x7f00000016c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001700)={0x6, 0x0, 0x2, 0x3, r1}, &(0x7f0000001740)=0x10) socketpair(0xb, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00082bbd7800fedbdfcfc1000000"], 0x1}}, 0x4) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10) socket$netlink(0x10, 0x3, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000480)=@int=0xda, 0x4) ioctl(r0, 0x82, &(0x7f00000004c0)="cd041d8b180ef04bc9cb5ff424682b6d3aadd2dcf03a033f5f680abec120d6e75a43ee667f349e93b6f0d6b89ca919691ab66ca47cc1b49b42aaeb9561a8e05f34470c37527e3267e20ba4aeeb21fc1891dcd56b9950d61549b8c1c1b5fedf1a3941e13ec32339147a8b95f1b5a756fec2bd3c9c0d8c00c02773a2fadfcfc5be67cd1b9c3b86a058b609f8ee6d") socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x0) unshare(0x40000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = accept(r6, &(0x7f0000002840)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000028c0)=0x80) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x800000, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800000000000000}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @dev}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/12, &(0x7f0000000300)=0xc) close(r6) writev(r7, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x7fc}], 0x1) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000340)=0x7, &(0x7f0000000380)=0x4) ioctl$void(r4, 0x5451) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[]}}, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280), 0x2) 12:32:22 executing program 3: 12:32:22 executing program 2: 12:32:22 executing program 0: 12:32:22 executing program 1: [ 469.367905] IPVS: ftp: loaded support on port[0] = 21 12:32:22 executing program 3: 12:32:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:22 executing program 0: 12:32:22 executing program 2: 12:32:23 executing program 1: 12:32:23 executing program 3: 12:32:23 executing program 2: 12:32:24 executing program 5: 12:32:24 executing program 0: 12:32:24 executing program 1: 12:32:24 executing program 3: 12:32:24 executing program 2: 12:32:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:24 executing program 5: 12:32:24 executing program 3: 12:32:24 executing program 2: 12:32:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="6d656d00017937737761532e63757289c942abe3fa72656e7400", 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) chroot(&(0x7f00000001c0)='./bus\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) 12:32:24 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}}, 0x0) 12:32:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="61fbf8d2294bdccb77c2ca3663c48fe52fb5373eb565d56a94a3654a330dc7f7ed4f2a4c5b7942625afaea1f83978a7e1da4850e31858c7d3ea3f49d518fd54481d28f6d11729d4c76ee7c47b7191245213f74c5954052c2c9e11bf817ef5ed8081cb240922a656888152285855f759250cfd208db6ee55c", 0x78) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[]}}, 0x0) 12:32:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) write$9p(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xd) 12:32:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xdf, 0x40}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x18) [ 471.277908] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled 12:32:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) write$9p(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 12:32:24 executing program 0: socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) recvmmsg(r0, &(0x7f000000ca80)=[{{&(0x7f000000b540)=@pppoe, 0x80, &(0x7f000000b700), 0x0, &(0x7f000000b740)=""/244, 0xf4}}], 0x1, 0x0, &(0x7f000000cb40)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000ed80)={{{@in=@dev, @in=@dev}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f000000ee80)=0xe8) 12:32:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwritev(r1, &(0x7f0000003440)=[{&(0x7f0000002400)='I', 0x1}], 0x1, 0x0) lseek(r1, 0x0, 0x4) 12:32:25 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fstatfs(r1, &(0x7f00000000c0)=""/5) 12:32:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) 12:32:25 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f40011007b2b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 12:32:25 executing program 5: perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:25 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000200)='./file1\x00', 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)) 12:32:25 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001123002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000", 0x30}], 0x1}, 0x0) 12:32:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:25 executing program 2: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_aout(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00'], 0x1) tee(r3, r1, 0x8, 0x0) 12:32:25 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0x4208, r1) dup2(0xffffffffffffffff, r0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) 12:32:25 executing program 3: perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:25 executing program 0: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) dup2(r0, r1) 12:32:25 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0xfffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() exit_group(0x0) ptrace(0x10, r0) wait4(0x0, &(0x7f0000000300), 0x0, &(0x7f0000000100)) 12:32:25 executing program 5: r0 = socket$inet6(0xa, 0x80000000000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 12:32:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0x0) lseek(r2, 0x0, 0x3) 12:32:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000040)={r1}, &(0x7f0000000180), 0x8) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 12:32:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) ftruncate(r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r2, 0xffffffffffffffff, 0x3) 12:32:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB="0000bc"]], 0x0, 0x0, &(0x7f0000000580)}) 12:32:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x1}}, 0x28) [ 472.528348] binder: 14898:14910 unknown command 536872064 [ 472.567240] binder: 14898:14910 ioctl c0306201 20000000 returned -22 12:32:26 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="f2"], 0x1) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f000096f000)="060063efff7f00009d", 0x9}]) 12:32:26 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000002c0)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000700)=0xe8) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x1}}, 0x28) 12:32:26 executing program 2: unshare(0x20020000) futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 12:32:26 executing program 5: unshare(0x20020000) futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x0) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) poll(&(0x7f0000000080), 0x0, 0x400007f) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') rmdir(&(0x7f0000000000)='./file1\x00') [ 472.733639] attempt to access beyond end of device 12:32:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000002c0)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x1, 0x101}}, 0x28) [ 472.756591] loop4: rw=2049, want=130, limit=112 12:32:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:26 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x793e}) r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) clone(0x6102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) write$evdev(r0, &(0x7f00000002c0), 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/193) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:32:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000280)}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) dup2(r1, r3) tkill(r2, 0x1000000000016) 12:32:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000002c0)) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000880)={0x28, 0x4, 0x0, {0x1, 0x101}}, 0x28) 12:32:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpgid(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote}}, 0x5c) 12:32:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000002) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000736000/0x4000)=nil, 0x4000, 0x0, 0x1012, r1, 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") 12:32:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000300)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x3003, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000008c0)) [ 473.212129] attempt to access beyond end of device [ 473.260123] loop4: rw=2049, want=130, limit=112 12:32:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 473.296704] attempt to access beyond end of device [ 473.315706] loop3: rw=4096, want=136, limit=24 12:32:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpgid(0xffffffffffffffff) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote}}, 0x5c) [ 473.346793] gfs2: error 10 reading superblock [ 473.457336] attempt to access beyond end of device [ 473.492099] loop3: rw=4096, want=136, limit=24 [ 473.547671] gfs2: error 10 reading superblock [ 473.604234] attempt to access beyond end of device [ 473.609384] loop4: rw=2049, want=130, limit=112 12:32:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:32:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r1 = accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x1}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000580)=0x78) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xeb}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:32:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0xffffffe9, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xa9e, 0x2b, 0x0, @local={0xfe, 0x80, [0x8848000000000000]}, @local, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x0, 0xad4]}) 12:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x6, 0x8000031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000012c0)=""/4096, &(0x7f0000000000)=0x1000) 12:32:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4086cff39c81384bd5d6374c52db8f70f61af7453961f836a474062f832f922a2e34bc9dd6f80cdf9b15060bd1de9e8e4cd5fb1f756a152b6deec52204c02cf0df5cd86471356df"], 0xd2) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:27 executing program 5: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x204000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:32:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003f80)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x900}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400050000000000000000000000000000000001e3cccc929d1aa66d90c6ac9bdc70bfbe61cecda8cb98404af9d594cae898b8bab0a895c834c2671a8a37e6dce554864560c716fa7914b312a8f47dd6f722dba000b29b260a6fa387240bd258c69ebae904174aabdfbcae47a5e80423596353bf84bb4f508cecb65de3b155a2f99c87403f0108640629b5d94f956b7f380006913ebb849a8a"], 0x1}}, 0x0) 12:32:27 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 474.018237] attempt to access beyond end of device [ 474.026016] *** Guest State *** [ 474.042642] loop4: rw=2049, want=130, limit=112 [ 474.090770] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 12:32:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 474.146464] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 12:32:27 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') [ 474.187974] CR3 = 0x0000000000000000 [ 474.197960] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 474.268003] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 474.284137] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 12:32:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\b\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @rand_addr}}) [ 474.312572] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 474.318317] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 474.362960] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 474.394836] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 474.403735] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 12:32:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 474.480583] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 474.494691] attempt to access beyond end of device [ 474.511154] loop4: rw=2049, want=130, limit=112 [ 474.524141] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 474.565715] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 474.595913] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 474.615419] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 474.637033] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 474.656452] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 474.673566] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 474.680012] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 474.714808] Interruptibility = 00000000 ActivityState = 00000000 [ 474.721238] *** Host State *** [ 474.724909] RIP = 0xffffffff8120269c RSP = 0xffff880181cdf390 [ 474.731095] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 474.738002] FSBase=00007fbec4f3e700 GSBase=ffff8801daf00000 TRBase=fffffe0000003000 [ 474.753257] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 474.763139] CR0=0000000080050033 CR3=00000001cc2f4000 CR4=00000000001426e0 [ 474.772592] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c01360 [ 474.783152] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 474.793050] *** Control State *** [ 474.798953] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 474.810393] EntryControls=0000d1ff ExitControls=002fefff [ 474.819469] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 474.831200] VMEntry: intr_info=800000bd errcode=00000000 ilen=00000000 [ 474.841482] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 474.870879] reason=80000021 qualification=0000000000000000 [ 474.891090] IDTVectoring: info=00000000 errcode=00000000 [ 474.899495] TSC Offset = 0xfffffeffeb873aa5 [ 474.904203] TPR Threshold = 0x00 [ 474.907758] EPT pointer = 0x0000000162f5401e 12:32:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 12:32:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 475.038316] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 12:32:28 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 475.149958] attempt to access beyond end of device [ 475.169597] loop4: rw=2049, want=130, limit=112 12:32:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$vnet(r1, &(0x7f0000000480)={0x1, {&(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000000380)=""/205}}, 0x68) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 12:32:28 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 475.413878] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 12:32:29 executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:32:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 475.589555] attempt to access beyond end of device [ 475.602398] loop4: rw=2049, want=130, limit=112 12:32:29 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x40000000000) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x509240, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa0100, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@nl, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="ffb9b2ad35929f161dd34cf6a274a0d2834a10ced01e8ab3ad10bcda5a65656c0413d5d5aa942ea6f9471685118b188eedebeef469aea63fb212960e3dce19bdba7bd1237b27a47ca3da68a9df89c059b06612e38327924a3ad420ac", 0x5c}], 0x1, &(0x7f0000000880)}, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="042813ffbdcd78390a3d"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r3 = creat(&(0x7f0000000580)='./file0\x00', 0x1) fcntl$setstatus(r3, 0x4, 0x4400) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) memfd_create(&(0x7f0000000e40)="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", 0x0) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x100000000) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) 12:32:29 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 12:32:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe8"], 0x46) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 475.698492] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities 12:32:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[]) [ 476.053181] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:29 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 476.160704] attempt to access beyond end of device [ 476.194066] loop4: rw=2049, want=130, limit=112 12:32:29 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[]) 12:32:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe8"], 0x46) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 476.415934] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[]) 12:32:30 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c03) 12:32:30 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000000)='?', 0x1, 0x0) lseek(r0, 0x0, 0x4) 12:32:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000040)=""/137, 0x89) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 476.799645] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:30 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f000001b000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="97aa89464f0e2f2b932aee627aea1f84aebe73c4f424656cff31c4cd179af23a0b908e1eeebdb364", 0x28}], 0x1, &(0x7f000001ef08)}, 0x0) pipe2(&(0x7f00000002c0), 0x0) [ 476.903429] attempt to access beyond end of device [ 476.951211] loop4: rw=2049, want=130, limit=112 12:32:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe8"], 0x46) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 477.012997] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x20000000000003, 0x0) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x0, &(0x7f0000001540)) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001a0001020000000000000000000000008c13c40b9590917861a64bf9e9bc318e96ffad496124a09a1371f938195e43e7be3d37a30300b8510513a5125b29af63a57e53fa7f1934ccb5c2362173fa19d0794d21094df9c0feed23cb4b644e6a1ce87528c0e981ad3c6fbfbfdba549e09b279381a126f6911e368eacb8f29017"], 0x1}}, 0x0) 12:32:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001140)=""/9}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/7, 0xffffffffffffff25}, {&(0x7f0000001200)=""/251}, {&(0x7f0000001300)=""/222}, {&(0x7f0000001400)=""/23}, {&(0x7f0000001440)=""/124}], 0x1) 12:32:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0xbb1, 0x4, 0x80, &(0x7f0000b2c000/0x3000)=nil, 0x8}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000be1000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111}}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x100, 0x200, 0x6, 0x0, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000780)={r4, 0x7e}, &(0x7f0000000740)=0xfffffffffffffed9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r5}, &(0x7f0000000440)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000300)=0x33f) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0x4c, @local, 0x283}}, 0x1, 0x8, 0x0, "e9ea665c347f5a77a56ab11bfbc6054ebf24f5ae2e5537774fa8bb9e58f8c229ac366ef0d457fb3667576f32d7dd7b00d463bfc76ca7fbc8786457e1aa667756c1795f9ca960896265357f8e79fe4a9e"}, 0xd8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000600, 0x1, 0x2000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) 12:32:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) [ 477.318707] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0), 0x0, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffff82) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x0) dup2(r1, r3) tkill(r2, 0x1000000000016) [ 477.598235] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3", 0x33, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 477.838890] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3", 0x33, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={&(0x7f0000000000), 0xc, &(0x7f0000001280)={&(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000001800120005000000736974000c00020600000f0006000000"], 0x1}}, 0x0) 12:32:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a5"], 0x69) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) 12:32:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000580), 0x3c1) [ 478.161112] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3", 0x33, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 478.540502] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 478.565681] attempt to access beyond end of device [ 478.584103] loop4: rw=2049, want=130, limit=112 12:32:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0xbb1, 0x4, 0x80, &(0x7f0000b2c000/0x3000)=nil, 0x8}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000be1000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111}}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x100, 0x200, 0x6, 0x0, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000780)={r4, 0x7e}, &(0x7f0000000740)=0xfffffffffffffed9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r5}, &(0x7f0000000440)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000300)=0x33f) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0x4c, @local, 0x283}}, 0x1, 0x8, 0x0, "e9ea665c347f5a77a56ab11bfbc6054ebf24f5ae2e5537774fa8bb9e58f8c229ac366ef0d457fb3667576f32d7dd7b00d463bfc76ca7fbc8786457e1aa667756c1795f9ca960896265357f8e79fe4a9e"}, 0xd8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000600, 0x1, 0x2000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:32 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_setup(0x1f, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0), 0x0, 0xfffffffffffffe01}]) 12:32:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000300)={0x283}, 0x96) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) writev(r2, &(0x7f0000002880)=[{&(0x7f0000002800)="68187f14e6ae377ff04d8b37ec7b51fc70cb156ede93ac425f9a7f33db40fd345bdee470064decd5bf97f49e040b2a5deb73c37b7c6fabf9407ebff04e261b2d00147830684aa4abb5efe95615c3d186ada9516f", 0x54}], 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100), 0x4) fcntl$setstatus(r3, 0x4, 0x4400) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000380)={0x0, r2}) clone(0x0, &(0x7f00000000c0), &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) 12:32:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a5"], 0x69) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f", 0x4c, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 478.831601] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 478.877007] EXT4-fs (loop5): Invalid log block size: 1794 12:32:32 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f", 0x4c, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000080ffff2f000000000000000500e2fe9da557d2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 12:32:32 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, &(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x80, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r3, 0x802, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40840) pipe(&(0x7f0000000080)) close(r0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140)="b30b488b8d030ab103b38ba2b3c644e1e22aafa3404e6e091f17a9d5690ca8195c780f21b8cc8d044454ec970cdcf4345d8f99b6e6a34c2c48761c48bb752811890e9f2d0e02d021d6b30e79540e616d0008e6ce1f1298ce2e0c73f634a851a6ecc771fe", &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="000326bd7000fcdbdf250f9c0000400002001400010000000006000000000000000000810000080008000400deff08000b000a00000008000500060000000800040001f0ffff08000800d3e100000c00010008000800000000000800050002000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) r7 = gettid() sched_getaffinity(r7, 0x8, &(0x7f00000008c0)) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r0, r8, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000000040)={'TPROXY\x00'}, 0xffffffffffffffff) 12:32:32 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 479.089192] attempt to access beyond end of device [ 479.110366] loop4: rw=2049, want=130, limit=112 12:32:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"6c6f000000c321000000000000ae00", 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e000302000000000000000000000000", @ANYRES32=r1], 0x2}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) [ 479.163323] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 479.192592] EXT4-fs (loop5): Invalid log block size: 1794 12:32:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0xbb1, 0x4, 0x80, &(0x7f0000b2c000/0x3000)=nil, 0x8}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000380)={&(0x7f0000be1000/0x2000)=nil, 0x2000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x111}}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x100, 0x200, 0x6, 0x0, 0x0}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000780)={r4, 0x7e}, &(0x7f0000000740)=0xfffffffffffffed9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={r5}, &(0x7f0000000440)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000300)=0x33f) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000080)=r6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e21, 0x4c, @local, 0x283}}, 0x1, 0x8, 0x0, "e9ea665c347f5a77a56ab11bfbc6054ebf24f5ae2e5537774fa8bb9e58f8c229ac366ef0d457fb3667576f32d7dd7b00d463bfc76ca7fbc8786457e1aa667756c1795f9ca960896265357f8e79fe4a9e"}, 0xd8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000600, 0x1, 0x2000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) 12:32:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a5"], 0x69) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f", 0x4c, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:33 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}}, 0x50) 12:32:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x9ffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000300)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@local, 0x7e, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r7 = dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000003c0), 0x173, 0x0) fcntl$dupfd(r4, 0x406, r9) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000fd1dfd9dea00000dff6eeaaf102ca035665f903435a74adbd22e6413107d17204e62c2911f5ea8efc5699326e02b66b9523b85c5bbc7334d62a31704008f5efba52ee00351efb3336b5c0a1b111a2aea589232244326b01b40326e2c0c0b0c1e54014bb5a5f306c9dc90c0c69d407eda494c503e63d23a89cdbc1a7e34d12656699601a7e0368e2b66f2b7db5ca0f7a0a375adde588cb5b301000034f4e6880693ee3686d0052bbe99c54cb84a383a2dd0efd662c65b978cfd7d6a1ba7f3841fb4cf5e9e14000000006e56d522e2a2c1811dace51a67ae73761460732bd145277ca7d36dceea02cc882ae34b6f47e36cf5bb7325babc51d92fca85ca7e04526c0ac1b706a53dcb1b0ff57cbbc28544f788056980a57068fe452d0364e78bd53fa3a7bb3e6135efe8156fed0f239d8abdb49ab2fbfe84b96747f45d3f1d2d6ece817536eb582628994bae524763cedf95bed491a48d66c4ffad0cd44138de19d4406dc73d4db9384cc0c8df6fcc99e21f0a13022ee4bf5a82498b69d95c87387ee35a58f5958e10236b6fcd0c4332efd15236ce5dcb21d5010c40a30a11af24ad12111d9cdf620c2ac0206cf9a192762ad95d0eda8485fb626443450900d254c5ab9e029db1aa6ad2c30d10d5735210dc6e145c39430193942cd20547c93da8408196e406b41866ef0ed03eb7cf0eec5230e5c8d36eac271e2c3d4f5bbe54a46402442307d41f99cd082be254c7d192d1e1b1c66fc2d1678a4f082495927aaf7291f5e540f41e9341872dbcce63b9702b0d5b65afb4c71380dfd18a6bac90714a848f2b0b2f692c7cd3cca37a546e00000000000000000000000000"]) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/122) r10 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r10, r10, &(0x7f0000000140), 0x200001) [ 479.839854] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:32:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/101) [ 479.911427] EXT4-fs (loop5): Invalid log block size: 1794 [ 479.948050] attempt to access beyond end of device [ 479.953871] loop4: rw=2049, want=130, limit=112 12:32:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0"], 0x7b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d", 0x59, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$amidi(&(0x7f0000000500)='/dev/amidi#\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x0, 0x0, 0x0, {0x0, 0x0, {0x0, 0x4}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008840), 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000003d00)=@assoc_value, 0x8) futex(&(0x7f0000003040), 0x0, 0x0, &(0x7f00000030c0), &(0x7f0000005000), 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) [ 480.261858] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 480.283737] EXT4-fs (loop5): Invalid log block size: 1794 12:32:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x9ffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000300)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@local, 0x7e, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r7 = dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000003c0), 0x173, 0x0) fcntl$dupfd(r4, 0x406, r9) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000010c0)=ANY=[@ANYBLOB="e0000001e0000001ffffffffffffff00ffffffffffff00000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000ffffffff000000000000000000000008800100070005ffff000069705f7674693000000000000000000073797a5f74756e00000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000f0001801000000000000000000000000000000000000000000000028004155444954000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaa140000000000000000000000000000000000000000000000000000ffffffffe00000020200000000000000e00000020000007fffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00ff00ff000000000000000000000007000100000008b3b2000967726530000000000000000000000000626f6e6430000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000012df50ed6c5f531d7b8b0000000000000000000000400000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004d41524b000000000000000000000000000000000000000000000000000206080000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000006e68ee808357a288ed80cd1b2624757dcdf5f3f1c778443372191e26d649fef90535a5b626410e89e877b761b598f6a184b2380cbf01bf7633a366c811bc8f9eed4550cf65dae51795fd40e51c9be542c6e4c2f6a84ce844d1b8d52d7d993f9c25c6aad387eaf"], 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/122) r10 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r10, r10, &(0x7f0000000140), 0x200001) 12:32:33 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d", 0x59, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 480.497345] attempt to access beyond end of device [ 480.530676] loop4: rw=2049, want=130, limit=112 [ 480.626405] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 480.667579] EXT4-fs (loop5): Invalid log block size: 1794 [ 481.085267] sctp: [Deprecated]: syz-executor0 (pid 15406) Use of int in maxseg socket option. [ 481.085267] Use struct sctp_assoc_value instead 12:32:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x6, 0x7a, 0x20000000000001, 0x8}, 0x27) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) 12:32:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0"], 0x7b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x9ffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000300)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@local, 0x7e, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r7 = dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000003c0), 0x173, 0x0) fcntl$dupfd(r4, 0x406, r9) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/122) r10 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r10, r10, &(0x7f0000000140), 0x200001) 12:32:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d", 0x59, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:34 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 12:32:34 executing program 2: [ 481.268168] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 481.285113] EXT4-fs (loop5): Invalid log block size: 1794 12:32:34 executing program 0: 12:32:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740)='/dev/net/tun\x00', 0x9ffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/19) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x200001, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x3ff, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000300)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0) getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f0000000240)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@local, 0x7e, r6}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r7 = dup2(r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000480)) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r7, &(0x7f00000003c0), 0x173, 0x0) fcntl$dupfd(r4, 0x406, r9) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/122) r10 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r10, r10, &(0x7f0000000140), 0x200001) 12:32:34 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000", 0x5f, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:34 executing program 2: [ 481.507703] attempt to access beyond end of device [ 481.523463] loop4: rw=2049, want=130, limit=112 [ 481.530590] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:32:35 executing program 0: 12:32:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0"], 0x7b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 481.574237] EXT4-fs (loop5): Invalid log block size: 1794 12:32:35 executing program 2: 12:32:35 executing program 0: 12:32:35 executing program 1: [ 481.914582] attempt to access beyond end of device [ 481.919757] loop4: rw=2049, want=130, limit=112 12:32:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000", 0x5f, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:35 executing program 0: 12:32:35 executing program 2: 12:32:35 executing program 1: 12:32:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc24"], 0x84) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:35 executing program 1: 12:32:35 executing program 0: 12:32:35 executing program 2: [ 482.177391] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 482.248335] EXT4-fs (loop5): Invalid log block size: 1794 12:32:35 executing program 1: 12:32:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 482.303668] attempt to access beyond end of device [ 482.308806] loop4: rw=2049, want=130, limit=112 12:32:35 executing program 0: 12:32:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc24"], 0x84) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000", 0x5f, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:35 executing program 2: 12:32:35 executing program 1: 12:32:35 executing program 0: 12:32:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:36 executing program 2: 12:32:36 executing program 1: [ 482.569710] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:32:36 executing program 0: 12:32:36 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r0, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 482.682820] EXT4-fs (loop5): Invalid log block size: 1794 12:32:36 executing program 2: 12:32:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000000000", 0x62, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 482.765515] attempt to access beyond end of device [ 482.809390] loop4: rw=2049, want=130, limit=112 12:32:36 executing program 0: 12:32:36 executing program 1: 12:32:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x498, 0x118, 0x118, 0x250, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000300), {[{{@arp={@multicast2, @rand_addr, 0x0, 0x0, @mac=@link_local, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00'}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@arp={@broadcast, @rand_addr, 0x0, 0x0, @mac=@local, {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'erspan0\x00', 'yam0\x00'}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "49531771b9f740937f23b217d33c5fd97c6683f338c6dbef97fb63fb5318cd068c5dad3175622b7540ee3ff6ea5fa5e29fdf01603be19f9642ed638f47ff1239"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) 12:32:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc24"], 0x84) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 482.879667] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 482.912939] EXT4-fs (loop5): Invalid log block size: 1794 12:32:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000001700)='./file0\x00') fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) 12:32:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000001700)='./file0\x00') fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) 12:32:36 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) unlink(&(0x7f0000001700)='./file0\x00') fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x10000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) link(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 12:32:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000000000", 0x62, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 483.166144] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem 12:32:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1) 12:32:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0xffffffffffffff0c, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000200)=""/243) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 483.229568] EXT4-fs (loop5): Invalid log block size: 1794 12:32:36 executing program 2: 12:32:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf7080000000000", 0x62, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 483.483712] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 483.547006] EXT4-fs (loop5): Invalid log block size: 1794 12:32:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c08"], 0x88) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000", 0x64, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:37 executing program 2: 12:32:37 executing program 0: 12:32:37 executing program 1: 12:32:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:37 executing program 1: 12:32:37 executing program 2: 12:32:37 executing program 0: 12:32:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) [ 483.902970] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 483.935478] EXT4-fs (loop5): Invalid log block size: 1794 12:32:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000", 0x64, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:37 executing program 2: [ 484.137249] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 484.200982] EXT4-fs (loop5): Invalid log block size: 1794 [ 484.241328] attempt to access beyond end of device [ 484.273142] loop4: rw=2049, want=130, limit=112 12:32:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c08"], 0x88) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:37 executing program 0: 12:32:37 executing program 1: 12:32:37 executing program 2: 12:32:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x33ff0}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000", 0x64, 0x400}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:37 executing program 2: 12:32:37 executing program 1: 12:32:37 executing program 0: [ 484.350892] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 484.382889] EXT4-fs (loop5): Invalid log block size: 1794 12:32:38 executing program 0: 12:32:38 executing program 1: 12:32:38 executing program 2: [ 484.687782] attempt to access beyond end of device [ 484.693354] loop4: rw=2049, want=130, limit=112 12:32:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c08"], 0x88) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:38 executing program 1: 12:32:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:38 executing program 2: [ 484.799254] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 484.983123] attempt to access beyond end of device [ 484.988149] loop4: rw=2049, want=130, limit=112 12:32:38 executing program 1: 12:32:38 executing program 0: 12:32:38 executing program 2: 12:32:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}], 0x1, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30"], 0x8a) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:38 executing program 1: 12:32:38 executing program 0: [ 485.225235] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) 12:32:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="0501000a0200000066000051e5030000ec0000000100000002070000000000000020000000200000000100008ada11ebaeeec3150000ffff53eff40d9dddf9740b41e224f6066a84fbb2228f5dbdebba90af4093eab66c171d90bdf70800000000000000fb", 0x65}], 0x0, &(0x7f0000000080)=ANY=[]) 12:32:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) 12:32:38 executing program 0: [ 485.416111] attempt to access beyond end of device [ 485.443613] loop4: rw=2049, want=130, limit=112 12:32:38 executing program 2: [ 485.470891] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:32:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30"], 0x8a) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) 12:32:39 executing program 0: [ 485.798314] attempt to access beyond end of device [ 485.803785] loop4: rw=2049, want=130, limit=112 12:32:39 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}], 0x1, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:39 executing program 2: 12:32:39 executing program 0: pipe(&(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200)=0x350, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000040), 0x0) 12:32:39 executing program 1: 12:32:39 executing program 5: 12:32:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30"], 0x8a) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 12:32:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r1}}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 12:32:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) quotactl(0x102080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000080)) 12:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000000), 0x1000) 12:32:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) 12:32:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB='U\x00\x00\x00sX']) [ 486.298947] attempt to access beyond end of device [ 486.310657] loop4: rw=2049, want=130, limit=112 12:32:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}], 0x1, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x4, 0x0, &(0x7f00000004c0)='8)1z'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11"], 0x1, 0x0, &(0x7f00000001c0)='l'}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 12:32:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4"], 0x8b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 12:32:40 executing program 1: setrlimit(0x7, &(0x7f0000a9cff8)) memfd_create(&(0x7f0000000040)='vmnet0\'system&\x00', 0x0) 12:32:40 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)}, &(0x7f0000000240)) 12:32:40 executing program 1: perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) [ 487.103634] binder: 15802:15822 unknown command 17 [ 487.124179] binder: 15802:15822 ioctl c0306201 20000140 returned -22 [ 487.160570] attempt to access beyond end of device 12:32:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0xdb}], 0x1) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x1be) [ 487.171597] loop4: rw=2049, want=130, limit=112 12:32:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4"], 0x8b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:40 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000100)=""/205, 0xcd, 0x2) 12:32:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"69705f76746930001e00", 0x800201e}) 12:32:40 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x180, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) connect$packet(r1, &(0x7f0000000680)={0x11, 0x1a, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r4 = getpgrp(0x0) ptrace(0xffffffffffffffff, r4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) kcmp(r4, r5, 0x2, r0, r1) getrandom(&(0x7f0000000100)=""/205, 0xcd, 0x2) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/24, 0x18}], 0x6, 0x0) [ 487.534811] attempt to access beyond end of device [ 487.539806] loop4: rw=2049, want=130, limit=112 12:32:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:41 executing program 2: 12:32:41 executing program 0: 12:32:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f4"], 0x8b) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:41 executing program 5: 12:32:41 executing program 0: 12:32:41 executing program 5: 12:32:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r1, r0, 0x0) 12:32:41 executing program 5: 12:32:41 executing program 0: [ 488.117162] attempt to access beyond end of device [ 488.133008] loop4: rw=2049, want=130, limit=112 12:32:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(0xffffffffffffffff, r1, &(0x7f00000000c0), 0x8080fffffffe) 12:32:41 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x180, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) connect$packet(r1, &(0x7f0000000680)={0x11, 0x1a, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r4 = getpgrp(0x0) ptrace(0xffffffffffffffff, r4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) kcmp(r4, r5, 0x2, r0, r1) getrandom(&(0x7f0000000100)=""/205, 0xcd, 0x2) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000600), &(0x7f0000000640)=0x4) preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/24, 0x18}], 0x6, 0x0) 12:32:42 executing program 0: 12:32:42 executing program 5: 12:32:42 executing program 2: 12:32:42 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0), 0x8080fffffffe) 12:32:42 executing program 5: 12:32:42 executing program 2: 12:32:42 executing program 0: 12:32:42 executing program 5: 12:32:42 executing program 2: 12:32:42 executing program 0: 12:32:42 executing program 1: 12:32:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x0) 12:32:42 executing program 5: 12:32:42 executing program 0: 12:32:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001b80)}}, {{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000004040)=""/224, 0xe0}}], 0x2, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:43 executing program 2: 12:32:43 executing program 0: 12:32:43 executing program 1: 12:32:43 executing program 5: 12:32:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x0) 12:32:43 executing program 0: 12:32:43 executing program 1: 12:32:43 executing program 5: 12:32:43 executing program 2: 12:32:43 executing program 1: 12:32:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde6863809aa0000004e2311b580fbf902bf40e2ce65d65659f358dc1ab7332d0ef55ec2eed78c43937aad9a85afe827389338a0ddbe9f63e9b1a3ab8c0d7de02d9bf774a2d8fa246a1f22796dbb1ceeb7a53617aad88a58766ded2ad1ca13532baedaf0b12baac4f65470bc2423012c089d30f408"], 0x8c) sendfile(r1, r1, &(0x7f00000000c0), 0x0) 12:32:44 executing program 0: 12:32:44 executing program 2: 12:32:44 executing program 5: 12:32:44 executing program 1: 12:32:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffcbd) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/156, 0x9c}], 0x1, &(0x7f0000004040)=""/224, 0xe0}}], 0x1, 0x0, &(0x7f00000002c0)={0x77359400}) 12:32:44 executing program 4: 12:32:44 executing program 5: 12:32:44 executing program 1: 12:32:44 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) dup2(r0, r1) 12:32:44 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)) 12:32:44 executing program 2: socketpair$unix(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) close(r1) 12:32:44 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x2) r2 = epoll_create(0x200000000c949) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000000d000)) 12:32:44 executing program 5: perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 12:32:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_names\x00') sendfile(r0, r0, &(0x7f0000000000)=0x4d, 0xffffffff) 12:32:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'rose0\x00'}, 0x18) 12:32:44 executing program 4: add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='0', 0x1, 0xfffffffffffffffb) 12:32:44 executing program 0: unshare(0x20020000) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() perf_event_open(&(0x7f00000000c0)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000080), 0x0, 0x400007f) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') rmdir(&(0x7f0000000000)='./file1\x00') 12:32:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00000000c0)={0x52, 0x7ff, 0xe6, {0x6, 0x8}, {0x800, 0x10000}, @period={0x5b, 0x3ff, 0x7, 0x27, 0x2, {0x10000, 0x6, 0xb615, 0x5}, 0x2, &(0x7f0000000080)=[0x58, 0x5]}}) r1 = socket(0x11, 0x8000000002, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() r3 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='cpuset.effective_mems\x00', 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f00000004c0)="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", 0xfff, 0xfffffffffffffffb) keyctl$negate(0xd, r3, 0x9, r4) sched_setscheduler(r2, 0x5, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x3c, &(0x7f0000000480)='syzkaller1\x00', 0xfffffffffffffd30) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000200)=ANY=[@ANYBLOB="120000040000000000d011080000003f000000000000000000000000000000000000000000040000000000004c75dd94d84ee29b3074a4636165b2df1de1d8771f770ec3139a1d86d205f99296e7ae09c93a0262f363526b0f02b9dec4c6c7c7dd41bfce1d0e66c8cd9b4d302ab37d98c8696abaef3a6a15b6e991efeef152fdca80ebd1381f83c441d5d618b8d455920dc132870b276cc77801208c5a76d88b9f6c9d6b24781e7698d4a55192926679c2dd1b3ce47b7dfec9402061873fa407d26235b77029355107d43f3199fe5f79443ac516db8f5f2eb0896de1e934ce91aad8a430974d846cbf0cfee4fc83ce6f37c4a2e6955f1c570c"]}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) 12:32:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x200, 0x7, 0x9, 0xf, r2}, 0xffffffffffffffe5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r1, &(0x7f00000009c0)="486341784fa09eb05d1554ce27df4b8c91cba7942e9a36fd0cf99f5d622133048896243c31d2d18e27bab485fb2954070697c935fe77302e1fd44be856afd7af7bf2e1fb45b293539292a0b2448a48ba4088582bf3814d82c274f2fc33805b39713b77b14e70126410ca0613d16f51ac15b4236295648fbabba87544bd89f8517d7f684fccf55a221ccc8813751be85fce3b388d0e55fa153c2e689da0c4f61e5ebdf2a182fc9fbb82de75a1b41973db83cefadfbc9a05a125699d72ca37ba085cb4448200edce4dd5b23271405daeb155b7", &(0x7f00000004c0)=""/7}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)={&(0x7f0000000b40)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280), 0x4) openat$cgroup_type(r0, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)="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") r5 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x3, 0x0, 0x5, 0x7, 0x1}, 0x314) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @rand_addr=0x7}, 0x3, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), 0x0, 0x20000000}, 0x4) perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x7, 0x6, 0x0, 0x7, 0x0, 0xc75, 0x200, 0x0, 0x12000000000000, 0x7, 0x10000, 0x5, 0x3, 0x400, 0x9, 0x2, 0x101, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x6, 0x0, 0x1, 0x400000000000000, 0x4, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x100000000, 0x0, 0xffffffffffffff00, 0x0, @perf_bp={&(0x7f0000000400), 0xd}, 0x6000, 0x9, 0x118000000000, 0x4, 0x5, 0x3, 0x100000000}, r5, 0x0, r3, 0x3) recvmsg(r4, &(0x7f0000001280)={&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000d80)=""/156, 0xffffffffffffffe1}, {&(0x7f0000000cc0)=""/20, 0x14}, {&(0x7f0000000e40)=""/77, 0xffffffffffffffa0}], 0x1, &(0x7f0000000f00)=""/210, 0xd2, 0x7299}, 0x100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x28, &(0x7f0000000500)}, 0x10) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000008c0)=""/239) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x48, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x8, 0x38, &(0x7f0000000480)=""/56, 0x0, 0x0, [], 0x0, 0x9}, 0x48) 12:32:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net//..\x00', 0x314ea2ec15e387bd, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:32:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0)="040300000100000000000000c52c", 0xe, 0x8000000, &(0x7f0000002340)={0xa, 0x0, 0x8000000000000004, @loopback}, 0x1c) 12:32:45 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x60, 0x0, @local={0xfe, 0x5c, [0xf0ffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf0]}}, 0x1c) 12:32:45 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x400442c8, &(0x7f0000000080)) 12:32:45 executing program 3: add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000280)='0', 0x1, 0xfffffffffffffffb) [ 491.557023] RDS: rds_bind could not find a transport for fe5c:ff08::300:0:f0:aa, load rds_tcp or rds_rdma? 12:32:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') 12:32:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 12:32:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8001) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000400)) 12:32:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, &(0x7f00000003c0)}) [ 491.856863] binder: 16069:16070 got transaction with invalid offset (0, min 0 max 24) or object. [ 491.909513] binder: 16069:16070 transaction failed 29201/-22, size 24-8 line 3036 [ 491.957472] binder_alloc: binder_alloc_mmap_handler: 16069 20001000-20004000 already mapped failed -16 [ 491.978965] binder: BINDER_SET_CONTEXT_MGR already set [ 491.984751] binder: 16069:16070 ioctl 40046207 0 returned -16 [ 491.990878] binder_alloc: 16069: binder_alloc_buf, no vma [ 491.997261] binder: 16069:16074 transaction failed 29189/-3, size 24-8 line 2973 [ 492.005518] binder: undelivered TRANSACTION_ERROR: 29201 [ 492.013925] binder: undelivered TRANSACTION_ERROR: 29189 12:32:45 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000880ce573080000000000"], 0x1) write$UHID_INPUT2(r0, &(0x7f0000000140)=ANY=[], 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80a, 0x0) dup2(r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r5 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) write$P9_RLCREATE(r5, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x82, 0x4, 0x3}, 0x9}}, 0x18) io_setup(0x0, &(0x7f0000000640)=0x0) io_destroy(r6) r7 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r8 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) write$evdev(r7, &(0x7f0000000380)=[{{0x77359400}, 0x3, 0x8c, 0xff}, {{0x0, 0x2710}, 0x0, 0x0, 0x400}, {{}, 0x5, 0xdda6, 0x4}, {{}, 0x3, 0x80000001, 0x40}], 0x60) keyctl$update(0x2, r8, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2f", 0x34) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r4, 0x1, 0x100, 0x101, 0x8}) ioctl$sock_SIOCBRADDBR(r7, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r7) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180)="7dd76e437497d4e876da61e0d7", 0xd, 0xfffffffffffffffb) sendfile(r5, r5, &(0x7f0000000000), 0x2000005) 12:32:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00006ed000), &(0x7f0000000040)=0x342) 12:32:47 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x0, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x200, 0x7, 0x9, 0xf, r2}, 0xffffffffffffffe5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r1, &(0x7f00000009c0)="486341784fa09eb05d1554ce27df4b8c91cba7942e9a36fd0cf99f5d622133048896243c31d2d18e27bab485fb2954070697c935fe77302e1fd44be856afd7af7bf2e1fb45b293539292a0b2448a48ba4088582bf3814d82c274f2fc33805b39713b77b14e70126410ca0613d16f51ac15b4236295648fbabba87544bd89f8517d7f684fccf55a221ccc8813751be85fce3b388d0e55fa153c2e689da0c4f61e5ebdf2a182fc9fbb82de75a1b41973db83cefadfbc9a05a125699d72ca37ba085cb4448200edce4dd5b23271405daeb155b7", &(0x7f00000004c0)=""/7}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)={&(0x7f0000000b40)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280), 0x4) openat$cgroup_type(r0, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000680)="6c6f00966f380f64a1e3d75d627d1fa159ad34909d60d298000000202759175d1563ca52dd984f43891be784e2058077d27c448d4b144278cb7548c2ee63bf3c3e591afc1f394f4281891836c571406eb4b673b00000fc0000080000daefec45ecd549b29bfe8d903f00e9e47e673ac1b2616a96bba7e2c0dcf95108eb167f5411d30d37e62266cf8eab640f747082aed2158e2b63f6bfe1343ea62da563ded7abea1ff873329c5646d518fe0e8f20010000792efc2a82a5a17035c87bf7efabe899eb77238a741c80fcb095a2a7d72c595d45388358f546dc882df5b0b55edb1ab6aa14e2b90d685e4a2dd1ba556e04276c1be06fdbc891251cb5bfb690b4c27f5d2fb3e7c92794cf496fdf0495b506841f483edac504209488eb27d43b367fd9992d1b7c478dd4b925aa51a04b100393e1cce76d8027f0a5ed280da80f26b1f3ff300c82255f928b44b9d9e7f2e4c16923dc8741b9c70d92fa1111b51f039ddd1b6adfac67e3a053d38ae16e97eaf5a0270be9a0f12066aa6ecfb569b664bc920bd5381608b35f3aa4210a79c4260a574d4da8c40b9f016ff4ab26b6170250c3214ea18622d704f1c021edffee24c8398c4230d16444e0495088a2f2599a662424f18196f750acca803a21b49423cb5e9f2703e393b982bfcfc4e3f7034f68f272ca8f66bb2f9f2aaf1a20a5a03f254da58698fa342731c70c3ccc40e88aac2edee4c7f59c6ba43021e91424b3056db56ded0c7493d8a3802759b905bb747cbebc7a0af3f570f89f7e1bd00b1c51") r5 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x3, 0x0, 0x5, 0x7, 0x1}, 0x314) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @rand_addr=0x7}, 0x3, 0x1, 0x4, 0x4}}, 0x80, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0), 0x0, 0x20000000}, 0x4) perf_event_open(&(0x7f00000005c0)={0x7, 0x70, 0x7, 0x6, 0x0, 0x7, 0x0, 0xc75, 0x200, 0x0, 0x12000000000000, 0x7, 0x10000, 0x5, 0x3, 0x400, 0x9, 0x2, 0x101, 0x0, 0x0, 0xfffffffffffffffd, 0x6, 0x0, 0x6, 0x0, 0x1, 0x400000000000000, 0x4, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x100000000, 0x0, 0xffffffffffffff00, 0x0, @perf_bp={&(0x7f0000000400), 0xd}, 0x6000, 0x9, 0x118000000000, 0x4, 0x5, 0x3, 0x100000000}, r5, 0x0, r3, 0x3) recvmsg(r4, &(0x7f0000001280)={&(0x7f0000000c40)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000d80)=""/156, 0xffffffffffffffe1}, {&(0x7f0000000cc0)=""/20, 0x14}, {&(0x7f0000000e40)=""/77, 0xffffffffffffffa0}], 0x1, &(0x7f0000000f00)=""/210, 0xd2, 0x7299}, 0x100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x28, &(0x7f0000000500)}, 0x10) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000008c0)=""/239) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x48, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x8, 0x38, &(0x7f0000000480)=""/56, 0x0, 0x0, [], 0x0, 0x9}, 0x48) 12:32:47 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000100)}}], 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='syscall\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 12:32:47 executing program 5: eventfd2(0x0, 0x0) unshare(0x400) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) pselect6(0x1c, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)={0x8}, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f0000000440), 0x8}) 12:32:47 executing program 3: clone(0x2302001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) 12:32:47 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b798bc593ab7821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 12:32:47 executing program 0: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, &(0x7f0000000bc0), 0x20) tee(r3, r1, 0x8, 0x0) 12:32:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 12:32:47 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getneigh={0x14, 0x1e, 0x101}, 0x14}}, 0x0) 12:32:47 executing program 0: 12:32:47 executing program 3: 12:32:47 executing program 5: 12:32:48 executing program 2: 12:32:48 executing program 0: 12:32:48 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:48 executing program 5: 12:32:48 executing program 3: 12:32:48 executing program 4: 12:32:48 executing program 0: 12:32:48 executing program 3: 12:32:48 executing program 5: 12:32:48 executing program 2: 12:32:48 executing program 4: 12:32:48 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:48 executing program 2: 12:32:48 executing program 5: 12:32:48 executing program 3: 12:32:48 executing program 0: 12:32:48 executing program 4: 12:32:48 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:48 executing program 2: 12:32:48 executing program 5: 12:32:48 executing program 4: 12:32:48 executing program 0: 12:32:48 executing program 3: 12:32:48 executing program 2: 12:32:48 executing program 5: 12:32:48 executing program 1: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:48 executing program 4: 12:32:48 executing program 0: 12:32:48 executing program 3: 12:32:48 executing program 5: 12:32:48 executing program 2: 12:32:49 executing program 1: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) 12:32:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x200010) dup3(r0, r1, 0x0) 12:32:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r1+10000000}, 0x8) r2 = getpid() r3 = socket(0x10, 0x802, 0x0) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[]}}, 0x0) 12:32:49 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x42002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 12:32:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) 12:32:49 executing program 1: futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:49 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00006f7000)={0x77359400}, &(0x7f0000000000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x0) 12:32:49 executing program 0: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x4, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) socketpair(0x11, 0x2, 0x7, &(0x7f00000002c0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002440)='maps\x00') lseek(r0, 0x8000000000, 0x1) 12:32:49 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x2, 0x64}}) 12:32:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000003a80)={&(0x7f0000000040)=@ipx={0x4, 0x401, 0x8ba, "00ea7433105d", 0x3}, 0x80, &(0x7f0000001740)=[{&(0x7f00000015c0)="0f25c6ae31869c01bb3d9f182c65ed3acfe3446f6b26104b7acebccd3016bcc9efbc87e2d71f6eee49fd18bed11bf1723a6c4135c107127af4361356891856a890c02a6868c9d9524cd93d709162add1eb2fb6c717fa272a31494d271340de92", 0x60}], 0x1, &(0x7f0000001800)=[{0xc0, 0x1ff, 0x8000, "21e32f3dc5fdffce5ae33556e74087a6230364951361bd20fdb6a611e84765f945d6d0f63b48b63f5ce0aab6caad478af7081b8759dc2b0cd1139e5db25774df8e0daf14581292a2d0ad9712977d240da5d57f741768b015f4599c07c08ed222b8ed961a590d8f2d60512930827233137a45cffdc5c5d7603409e086afce12726862f47d7127102bb2fd521f77ea53fbca69c584af3e7b1109df1e4b3669aec33d7378beb5fc0bef2a"}], 0xc0, 0x41}, 0x40) 12:32:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 12:32:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x13) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execveat(r1, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000000), 0x1000) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") poll(&(0x7f0000000100), 0x0, 0x327) 12:32:49 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x5c, [0xf0ffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf0]}}, 0x1c) 12:32:49 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) [ 496.383543] RDS: rds_bind could not find a transport for fe5c:ff08::300:0:f0:aa, load rds_tcp or rds_rdma? 12:32:49 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa20000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d640500de00000065040400010000000704000001000000b7040000000000006a0a00fe00000000850004001a000000b700004a000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 12:32:50 executing program 3: mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 12:32:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x3e, 0x4}) 12:32:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [0x40000072]}) 12:32:50 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200100, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001640)='/dev/autofs\x00', 0x0, 0x0) dup2(r1, r0) 12:32:50 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000009) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0xfd71) pwritev(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) pwritev(r1, &(0x7f0000000280), 0x2c3, 0x0) 12:32:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 12:32:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 12:32:50 executing program 5: r0 = socket$inet6(0xa, 0x40000000000006, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) sendmmsg(r1, &(0x7f0000008f40)=[{{&(0x7f00000050c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(crct10dif)\x00'}, 0x80, &(0x7f00000054c0), 0x0, &(0x7f0000009140)=ANY=[@ANYBLOB="70000000000000000f01000000000000"], 0x10}}], 0x1, 0x4000) 12:32:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 12:32:50 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) 12:32:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b2f66696c653000"}, 0x6e) 12:32:50 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb74d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r0 = socket$inet(0x2, 0x2, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x82, 0x101, 0x1000}, 0xc) [ 497.342607] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 12:32:50 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="69c8069d"]) 12:32:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") timer_create(0xfffffffffffffffc, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0), &(0x7f0000000140)}}, &(0x7f00000002c0)) 12:32:50 executing program 4: request_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340)=',securityGPL%}#-\x00', 0xffffffffffffffff) 12:32:51 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 12:32:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 12:32:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 12:32:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000001ec0)=@xdp, 0x80, &(0x7f0000002000), 0x0, &(0x7f0000002040)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x1, 0x0) 12:32:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r2}, 0xc) 12:32:51 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1) write$UHID_INPUT2(r0, &(0x7f0000000140)=ANY=[], 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000440)=0xc) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, &(0x7f0000000640)=0x0) io_destroy(r3) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r5, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665bb2a931cc81a4dca909128519bf5e266f9cc58ba739de367cd10c1d81e8bdc487c38eed3", 0x67) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x1, 0x100, 0x101, 0x8}) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180)="7dd76e437497d4e876da61e0d7", 0xd, 0xfffffffffffffffb) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket(0x100000000000, 0xf, 0x5) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000200), 0x2c) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000ff0)={0x0, 0x0, 0x0, 0x2}, 0x1c2) 12:32:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x6c00) 12:32:51 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000016c0), &(0x7f0000000000)=0x9c) 12:32:51 executing program 4: r0 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)='id_resolver\x00', 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='procvboxnet1+%proc{]em1-mime_type\x00', r0) 12:32:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) 12:32:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 12:32:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f38cca29c07683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0) fchdir(r0) mknod(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) unlink(&(0x7f00000000c0)='./bus\x00') 12:32:52 executing program 5: request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000040)='id_resolver\x00', 0x0) 12:32:52 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x80089203, 0x0) 12:32:52 executing program 0: socket$kcm(0x2, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000000002100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) 12:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000000002100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) 12:32:52 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8943, &(0x7f0000000300)='0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f0000000340)=""/251}, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x14) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='ppp0keyring(md5sumnodevselinuxcpusetkeyring\x00') socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f0000000080), 0x301) setsockopt$sock_attach_bpf(r3, 0x29, 0x15, &(0x7f0000000080), 0xff15) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000007135950000000000000000010000000010fc325f534864cb42556aac5ac75d0a0f096957c8ea151ea723629a81b25efd33dac5dd65476615f44c8c63b2948668621d4c7ae76d535556fb9489291d6c42d9a00ba69fcd8a4882d04c59ef41e2770c791c49db282e46df8f079b4ed9d6dd9fdc9b90b9d73d"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r5 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=@raw, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYBLOB="020100003e7c0000000000e1fffffffffff1"]) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xf9be, 0x7f, 0x3, 0x100, 0x7, 0x5, 0x80000001, 0x2, 0x6a, 0x0, 0x9, 0x3, 0x3, 0x200, 0x0, 0x0, 0x2, 0x100000000, 0x22f9a3e6, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)) socket$kcm(0x29, 0x2, 0x0) 12:32:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x7, 0x3ff, 0x1, 0x2}, 0x2c) 12:32:52 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x301}, 0x1c}}, 0x0) 12:32:52 executing program 5: 12:32:52 executing program 3: 12:32:52 executing program 3: 12:32:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000000002100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) 12:32:52 executing program 1: 12:32:52 executing program 5: 12:32:52 executing program 4: 12:32:53 executing program 1: 12:32:53 executing program 0: socket$kcm(0x2, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000000002100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) 12:32:53 executing program 4: 12:32:53 executing program 5: 12:32:53 executing program 3: 12:32:53 executing program 4: 12:32:53 executing program 3: 12:32:53 executing program 5: 12:32:53 executing program 2: 12:32:53 executing program 1: 12:32:53 executing program 5: 12:32:53 executing program 1: 12:32:53 executing program 0: 12:32:53 executing program 4: 12:32:53 executing program 3: 12:32:53 executing program 2: 12:32:53 executing program 5: 12:32:53 executing program 1: 12:32:53 executing program 4: 12:32:53 executing program 0: 12:32:53 executing program 3: 12:32:53 executing program 5: 12:32:53 executing program 2: 12:32:53 executing program 4: 12:32:53 executing program 0: 12:32:53 executing program 1: 12:32:54 executing program 3: 12:32:54 executing program 5: 12:32:54 executing program 2: 12:32:54 executing program 1: 12:32:54 executing program 4: 12:32:54 executing program 0: 12:32:54 executing program 2: 12:32:54 executing program 5: 12:32:54 executing program 3: 12:32:54 executing program 1: 12:32:54 executing program 0: 12:32:54 executing program 4: 12:32:54 executing program 2: 12:32:54 executing program 5: 12:32:54 executing program 3: 12:32:54 executing program 1: 12:32:54 executing program 0: 12:32:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:54 executing program 5: syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x0, 0x28001) 12:32:54 executing program 2: 12:32:54 executing program 1: 12:32:54 executing program 3: 12:32:54 executing program 2: 12:32:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000001280)='net/anycast6\x00') readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000001280)='net/anycast6\x00') readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000010c0)={'bond_slave_0\x00', 0x132}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/4096) 12:32:54 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x309000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x53) r1 = socket(0x11, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40100, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:32:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) 12:32:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000002440)='maps\x00') preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0) 12:32:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000001280)='net/anycast6\x00') readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:55 executing program 0: socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x80, 0x2}, {}], 0x30) 12:32:55 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f00000007c0)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 12:32:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) 12:32:55 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) 12:32:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:32:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfffffffffffffffc) 12:32:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x4}) poll(&(0x7f0000002a40)=[{r1, 0x20b}], 0x1, 0x0) 12:32:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) 12:32:55 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='personality\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) 12:32:55 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/167, 0xa7}], 0x1, 0x0) 12:32:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)) munmap(&(0x7f000058e000/0x3000)=nil, 0x3000) 12:32:55 executing program 3: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000640)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000d80)={&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/56, 0x38}, {&(0x7f0000000cc0)=""/115, 0x73}], 0x2, &(0x7f0000000d40)=""/53, 0x35, 0x5}, 0x40002020) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xfb, &(0x7f0000000340)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)="2f67726f7574002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac752a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1c0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98ace3574511e0c61f722ff61f1db073657764c13f23ed76e9f5ad9b0a121d3019202a82a3e997831b6e1e10f53b98ab1eb37dc61e5717d51a0369715e1e92e66a6b80c82805f9df4f8a02c23d874f64ae00", 0x2761, 0x0) perf_event_open$cgroup(&(0x7f0000000e00)={0x0, 0x70, 0x401, 0x6, 0xfffffffffffffff7, 0xb889, 0x0, 0x401, 0x800, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2, 0xffff, 0x800, 0x0, 0x637, 0x0, 0x0, 0x3f, 0xfff, 0x0, 0x201, 0x8, 0x8, 0x1, 0xc10f, 0x6, 0x3ff, 0x4, 0xfffffffffffffffa, 0x0, 0x4, 0x7fffffff, 0x1, 0x0, 0x80000001, 0x6, @perf_bp={&(0x7f0000000dc0)}, 0x6000, 0x10000, 0x3, 0x0, 0xa6, 0x81, 0x1ff}, r2, 0xb, r1, 0xa) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x16}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000680)="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") bpf$PROG_LOAD(0x5, &(0x7f0000007540)={0x0, 0x2a, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x4, 0x1000, &(0x7f0000002bc0)=""/4096, 0x41100, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000b00)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f00000004c0)="4250664c2d18e967d8df8833a210e6e77ce9b5cdbbd244a797c1b65cf4810cc72484b83581ce8f551b23769c3a01f4c31e291719da62cafc6c4069f9a5555ed4b1b563012200034f9151d08015ccbdad6ea5072ff6c10e", &(0x7f0000001080)=""/9}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r2, &(0x7f00000004c0), &(0x7f0000000200)=""/144}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)={&(0x7f0000000e80)='./file0\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)={0xd, 0x4, 0x48e, 0x1f, 0x10, 0xffffffffffffffff, 0x7}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r4, 0x0, 0x10}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvmsg$kcm(r2, &(0x7f0000002b00)={&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000002940)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000900)=""/194, 0xc2}, {&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/242, 0xf2}, {&(0x7f00000027c0)=""/215, 0xd7}], 0x6, &(0x7f0000002a00)=""/216, 0xd8, 0x3}, 0x0) socket$kcm(0x29, 0x2, 0x0) 12:32:55 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x8000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)}, 0x0) 12:32:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x800040000000002, 0x11) recvmsg(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000840)=""/165, 0xa5}, {&(0x7f0000000900)=""/68, 0x44}, {&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/173, 0xad}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/104, 0x68}], 0x7, 0x0, 0x0, 0x10001}, 0x2) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, 0x0, 0x0) 12:32:55 executing program 2: getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e6e652bb2ea7a7a3100", 0x200002, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6={0xa, 0x8, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="c6", 0x1}], 0x1, &(0x7f0000000900), 0x0, 0xc083}, 0x41) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x0) socketpair(0x11, 0x2, 0x7, &(0x7f00000002c0)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/77, 0x4d}], 0x4, &(0x7f0000000980)=""/4096, 0x1000, 0x1}, 0x2003) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000019c0)=@ll={0x11, 0x17, r3, 0x1, 0x10001, 0x6, @broadcast}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)="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", 0x1000}], 0x1, &(0x7f0000002a80), 0x0, 0x81}, 0x24000001) 12:32:55 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:55 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 12:32:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000580)={0x0, ""/68}, 0x4c, 0x0, 0x0) msgsnd(0x0, &(0x7f0000001840)={0x1}, 0x8, 0x0) 12:32:56 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x10001) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) write(r1, &(0x7f00000006c0)="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", 0x1000) 12:32:56 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000180)) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) 12:32:56 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x2, &(0x7f0000000340)) 12:32:57 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f0000000440)={0x7f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) 12:32:57 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:57 executing program 2: r0 = memfd_create(&(0x7f0000000040)="7d004e0694e2e0ebabe1031ec88b1688273b67dd04720e8dff7b2b072fd293a7cc3d3615", 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000004, 0x2012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 12:32:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60}, 0x60) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000300)}]) 12:32:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000002fc0)={0x0, 0x0, 0x0, @thr={&(0x7f0000004740), &(0x7f00000047c0)}}, &(0x7f00000048c0)) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0xff0d}}, 0x0) recvmmsg(r0, &(0x7f0000004540)=[{{&(0x7f0000000540)=@nfc_llcp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/100, 0x64}}], 0x1, 0x100, &(0x7f0000004700)={0x0, 0x1c9c380}) 12:32:57 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r2 = dup2(r0, r1) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x2dd, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2, 0x6, 0x1}, [{0x0, 0x0, 0x1}], "74cd242eb889bf34dabd6dbe76009a81034e9959acaa585782c9484ed90acc1b8be34ef947afc3bb6784cccf0f19a89f611346fa0b8e807680502306dca199129877c7509e99c28c60de0fc4ba8113f3301a86fb01ce5ad1e6d73cf7b856", [[]]}, 0x1b6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x4) 12:32:57 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) [ 504.176565] audit: type=1804 audit(1540729977.648:57): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/450/file0/bus" dev="sda1" ino=17730 res=1 [ 504.237932] audit: type=1804 audit(1540729977.708:58): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/450/file0/bus" dev="sda1" ino=17730 res=1 12:32:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000240)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @broadcast}, 'ip6tnl0\x00'}) 12:32:57 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x100000001}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_setup(0x0, &(0x7f0000000640)=0x0) io_destroy(r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r6, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665", 0x43) pwritev(r5, &(0x7f0000000340), 0x0, 0x81805) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1, 0x100, 0x101, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x801, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180)="7dd76e437497d4e876da61e0d7", 0xd, 0xfffffffffffffffb) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb}, 0x2c) 12:32:57 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x1}}, 0x0, 0x1, r0, 0x0) 12:32:57 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) [ 504.310878] audit: type=1804 audit(1540729977.708:59): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/450/file0/bus" dev="sda1" ino=17730 res=1 12:32:57 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r2 = dup2(r0, r1) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x2dd, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2, 0x6, 0x1}, [{0x0, 0x0, 0x1}], "74cd242eb889bf34dabd6dbe76009a81034e9959acaa585782c9484ed90acc1b8be34ef947afc3bb6784cccf0f19a89f611346fa0b8e807680502306dca199129877c7509e99c28c60de0fc4ba8113f3301a86fb01ce5ad1e6d73cf7b856", [[]]}, 0x1b6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x4) 12:32:57 executing program 5: 12:32:57 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:58 executing program 5: 12:32:58 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000200)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) r2 = dup2(r0, r1) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x2dd, 0x38, 0x0, 0x0, 0x0, 0x20, 0x2, 0x6, 0x1}, [{0x0, 0x0, 0x1}], "74cd242eb889bf34dabd6dbe76009a81034e9959acaa585782c9484ed90acc1b8be34ef947afc3bb6784cccf0f19a89f611346fa0b8e807680502306dca199129877c7509e99c28c60de0fc4ba8113f3301a86fb01ce5ad1e6d73cf7b856", [[]]}, 0x1b6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x4) 12:32:58 executing program 4: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:58 executing program 1: 12:32:58 executing program 5: 12:32:58 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x100000001}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000240), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) io_setup(0x0, &(0x7f0000000640)=0x0) io_destroy(r4) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r6, &(0x7f0000000580)="8adb07b2c2017f9577a86ba3a7a68677dc3f2b0fbd3a6ba6f892e604d80e66bcee3b0fa0ce290f394eafc38e217f0784540bea2ffce9a854b76f1f04de9ccc4f4cc665", 0x43) pwritev(r5, &(0x7f0000000340), 0x0, 0x81805) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000300)={0x0, r2, 0x1, 0x100, 0x101, 0x8}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x801, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000004c0)='veth0_to_bond\x00') ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0), &(0x7f0000000180)="7dd76e437497d4e876da61e0d7", 0xd, 0xfffffffffffffffb) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socket(0x0, 0x0, 0x10001) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb}, 0x2c) 12:32:58 executing program 1: 12:32:58 executing program 4: r0 = socket$kcm(0xa, 0x0, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:58 executing program 0: 12:32:58 executing program 3: 12:32:58 executing program 5: mq_open(&(0x7f0000000b00)='mask', 0x840, 0x0, 0x0) 12:32:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/133) 12:32:58 executing program 0: 12:32:58 executing program 3: 12:32:58 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:58 executing program 5: mq_open(&(0x7f0000000b00)='mask', 0x840, 0x0, 0x0) 12:32:58 executing program 0: 12:32:58 executing program 2: 12:32:58 executing program 1: 12:32:58 executing program 3: 12:32:58 executing program 2: 12:32:58 executing program 0: 12:32:58 executing program 5: mq_open(&(0x7f0000000b00)='mask', 0x840, 0x0, 0x0) 12:32:58 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:58 executing program 1: 12:32:59 executing program 2: 12:32:59 executing program 3: 12:32:59 executing program 0: 12:32:59 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:59 executing program 1: 12:32:59 executing program 5: mq_open(&(0x7f0000000b00)='mask', 0x840, 0x0, 0x0) 12:32:59 executing program 2: 12:32:59 executing program 0: 12:32:59 executing program 3: 12:32:59 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa592d", 0x48}], 0x1}, 0x0) 12:32:59 executing program 1: 12:32:59 executing program 5: mq_open(&(0x7f0000000b00)='mask', 0x0, 0x0, 0x0) 12:32:59 executing program 0: 12:32:59 executing program 2: 12:32:59 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)}, 0x0) 12:32:59 executing program 3: 12:32:59 executing program 1: 12:32:59 executing program 5: 12:32:59 executing program 2: 12:32:59 executing program 0: 12:32:59 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 12:32:59 executing program 5: 12:32:59 executing program 1: 12:32:59 executing program 3: 12:32:59 executing program 0: 12:32:59 executing program 2: 12:32:59 executing program 5: 12:32:59 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163", 0x24}], 0x1}, 0x0) 12:32:59 executing program 1: 12:32:59 executing program 3: 12:33:00 executing program 2: 12:33:00 executing program 0: 12:33:00 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578", 0x36}], 0x1}, 0x0) 12:33:00 executing program 5: 12:33:00 executing program 1: 12:33:00 executing program 3: 12:33:00 executing program 2: 12:33:00 executing program 0: 12:33:00 executing program 1: 12:33:00 executing program 5: 12:33:00 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578", 0x36}], 0x1}, 0x0) 12:33:00 executing program 3: 12:33:00 executing program 0: 12:33:00 executing program 5: 12:33:00 executing program 1: 12:33:00 executing program 2: 12:33:00 executing program 3: 12:33:00 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578", 0x36}], 0x1}, 0x0) 12:33:00 executing program 1: 12:33:00 executing program 0: 12:33:00 executing program 5: 12:33:00 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080046000018000000000011907800141400ac1423bb890300000e0090780000001100000000003c000000000000"], &(0x7f0000000100)) 12:33:00 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x2f) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 12:33:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0xff0d}}, 0x0) 12:33:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") flistxattr(r1, &(0x7f0000000080)=""/42, 0x3a6) 12:33:00 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d4050708", 0x3f}], 0x1}, 0x0) 12:33:00 executing program 5: seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1a, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000200)}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_delete(0x0) 12:33:00 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d4050708", 0x3f}], 0x1}, 0x0) 12:33:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x368, 0xf8, 0xf8, 0x208, 0x208, 0x0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x98, 0xe0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="bb53825b1eb3"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) 12:33:00 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) 12:33:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="080043002b00000014004c00000000000000000000000000000000019cc609b4fa13d00b84d946608c4800d5faa332aebf134d193f517308b9f737c2685fdf994a77eeefc1ad85901c4fc2eda665d0066d5a3b6de839b01ec3df7adf85d0f67f083e92c73a317ab95e25619d99b98066989900000000"], 0x1}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 12:33:01 executing program 2: clone(0x200, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000580), &(0x7f0000000800)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540), &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f0000000380), &(0x7f00000003c0)) ioctl$KDSKBLED(r0, 0x4b65, 0x0) open$dir(&(0x7f0000000540)='./file0\x00', 0x82, 0x0) 12:33:01 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d4050708", 0x3f}], 0x1}, 0x0) [ 507.590707] audit: type=1326 audit(1540729981.058:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16950 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:33:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100000000, 0x0) fchownat(r0, &(0x7f0000000180)='\x00', 0x0, 0x0, 0x1000) 12:33:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x59) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 12:33:01 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0a5c3d023c126285718070") connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) [ 507.666439] audit: type=1804 audit(1540729981.128:61): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir606798342/syzkaller.4FyqdF/385/cpuacct.usage_percpu_user" dev="sda1" ino=17753 res=1 12:33:01 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2", 0x44}], 0x1}, 0x0) 12:33:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000d08ff7)='/dev/sg#\x00', 0x0, 0x81) close(r0) 12:33:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x1, 0xff39) sendto$inet(r0, &(0x7f0000000240)="dd", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x18004e20}, 0x10) recvmsg(r0, &(0x7f00000019c0)={&(0x7f0000001300)=@hci, 0x80, &(0x7f0000000100), 0x5b}, 0x10143) 12:33:01 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x42002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x1}]}, 0x78) 12:33:01 executing program 1: clock_settime(0x0, &(0x7f0000000080)={0x0, 0x1c9c380}) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setrlimit(0x400000000000007, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x3}, 0x2c) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') 12:33:01 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2", 0x44}], 0x1}, 0x0) 12:33:01 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) [ 508.270612] audit: type=1326 audit(1540729981.738:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16950 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0xffff0000 12:33:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f00000000c0)) 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2", 0x44}], 0x1}, 0x0) 12:33:02 executing program 1: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x7530}}, 0x0) 12:33:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r1, &(0x7f0000000000), 0x800000bf) 12:33:02 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000280)="f0", 0x1, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz'}, 0x0) 12:33:02 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x859, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 12:33:02 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/118, 0x76}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa", 0x46}], 0x1}, 0x0) 12:33:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 12:33:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x97d}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)) 12:33:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f00000000c0)) 12:33:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x0) 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa", 0x46}], 0x1}, 0x0) 12:33:02 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x0) 12:33:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000002000010000000000040000000100000008000000000000000400000008000100ac1414aa08000200ac1414bb"], 0x1}}, 0x0) 12:33:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=@bridge_newneigh={0x1c, 0x1c, 0x429, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) 12:33:02 executing program 0: r0 = gettid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'vlan0\x00', 0xd806}) r2 = socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1) dup3(r2, r1, 0x0) tkill(r0, 0x15) 12:33:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xdc1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000020000006a0a00fe00000008850000004f000000b7000000000000009500040000000000"], &(0x7f0000000380)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x71, 0x81, &(0x7f0000000680)="efb19002d331e3b2db804bf106002cfa365374769d4f9d4612fa88c2d43442262aa96e755b6f4753382f53a33e7c1eef3d7c73dde6154aacfb460a0632178fa34000000087a4bc159fac06eb78694781460000ce1a7a83b93bedcb8e76e85f771d12575e2aed15609a892582dc420588fb", &(0x7f0000000500)=""/129, 0xfffd}, 0x28) 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa", 0x46}], 0x1}, 0x0) 12:33:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x10000000006, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)="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", 0x7d1}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000080)}, 0x0) 12:33:02 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x0) 12:33:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x10001) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 509.278396] ODEBUG: object 000000003928da3c is on stack 00000000b0cbf6e5, but NOT annotated. [ 509.290696] WARNING: CPU: 0 PID: 17092 at lib/debugobjects.c:369 __debug_object_init.cold.14+0x51/0xdf [ 509.300156] Kernel panic - not syncing: panic_on_warn set ... [ 509.306062] CPU: 0 PID: 17092 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 509.314556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.323916] Call Trace: [ 509.326606] dump_stack+0x244/0x39d [ 509.330249] ? dump_stack_print_info.cold.1+0x20/0x20 [ 509.335463] panic+0x2ad/0x55c [ 509.338675] ? add_taint.cold.5+0x16/0x16 [ 509.342427] audit: type=1804 audit(1540729982.745:63): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/471/bus" dev="sda1" ino=17774 res=1 [ 509.342838] ? __warn.cold.8+0x5/0x45 [ 509.342859] ? __debug_object_init.cold.14+0x51/0xdf [ 509.342874] __warn.cold.8+0x20/0x45 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa59", 0x47}], 0x1}, 0x0) 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa59", 0x47}], 0x1}, 0x0) [ 509.342890] ? __debug_object_init.cold.14+0x51/0xdf [ 509.342911] report_bug+0x254/0x2d0 [ 509.377083] kobject: 'loop4' (000000006df5d80a): kobject_uevent_env [ 509.379202] do_error_trap+0x11b/0x200 [ 509.390131] kobject: 'loop4' (000000006df5d80a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 509.394256] do_invalid_op+0x36/0x40 [ 509.394273] ? __debug_object_init.cold.14+0x51/0xdf [ 509.394350] invalid_op+0x14/0x20 [ 509.394371] RIP: 0010:__debug_object_init.cold.14+0x51/0xdf 12:33:02 executing program 4: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000200)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000040)=[{&(0x7f00000000c0)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7d8a295b90bf9cc8578ec03a10c48d40507080a2f858ad2c4aa59", 0x47}], 0x1}, 0x0) [ 509.425636] Code: ea 03 80 3c 02 00 75 7c 49 8b 54 24 18 48 89 de 48 c7 c7 c0 f1 40 88 4c 89 85 d0 fd ff ff e8 09 8c d1 fd 4c 8b 85 d0 fd ff ff <0f> 0b e9 09 d6 ff ff 41 83 c4 01 b8 ff ff 37 00 44 89 25 b7 4e 66 [ 509.433472] audit: type=1804 audit(1540729982.745:64): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/471/bus" dev="sda1" ino=17774 res=1 [ 509.444540] RSP: 0018:ffff88015ebf7308 EFLAGS: 00010086 [ 509.444553] RAX: 0000000000000050 RBX: ffff88015ebf7af8 RCX: ffffc90003e76000 12:33:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x10001) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 509.444563] RDX: 0000000000000000 RSI: ffffffff816585a5 RDI: 0000000000000005 [ 509.444572] RBP: ffff88015ebf7560 R08: ffff8801d91f3470 R09: ffffed003b5c5008 [ 509.444587] R10: ffffed003b5c5008 R11: ffff8801dae28047 R12: ffff88018965a440 [ 509.494695] kobject: 'loop5' (00000000d52c1d09): kobject_uevent_env [ 509.494852] R13: 00000000000e8e00 R14: ffff88018965a440 R15: ffff8801d91f3460 [ 509.502153] kobject: 'loop5' (00000000d52c1d09): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 509.508555] ? vprintk_func+0x85/0x181 [ 509.508574] ? __debug_object_init.cold.14+0x4a/0xdf [ 509.508588] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 509.508613] ? debug_object_free+0x690/0x690 [ 509.541602] audit: type=1804 audit(1540729982.745:65): pid=17099 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/root/syzkaller-testdir819827586/syzkaller.IQPciK/471/bus" dev="sda1" ino=17774 res=1 [ 509.543305] ? unwind_get_return_address+0x61/0xa0 [ 509.543334] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 509.543352] ? depot_save_stack+0x292/0x470 12:33:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x10001) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 509.543374] ? save_stack+0xa9/0xd0 [ 509.584432] ? save_stack+0x43/0xd0 [ 509.588073] ? kasan_kmalloc+0xc7/0xe0 [ 509.591980] ? bpf_test_init.isra.10+0x98/0x100 [ 509.596664] ? zap_class+0x640/0x640 [ 509.600392] ? do_syscall_64+0x1b9/0x820 [ 509.604469] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.609854] ? find_held_lock+0x36/0x1c0 [ 509.613937] debug_object_init+0x16/0x20 [ 509.618006] init_timer_key+0xa9/0x480 [ 509.621921] ? init_timer_on_stack_key+0xe0/0xe0 [ 509.626694] ? __might_fault+0x12b/0x1e0 12:33:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r1, 0x10001) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 509.630778] ? __lockdep_init_map+0x105/0x590 [ 509.635288] ? __lockdep_init_map+0x105/0x590 [ 509.639797] ? lockdep_init_map+0x9/0x10 [ 509.643872] sock_init_data+0xe1/0xdc0 [ 509.647772] ? sk_stop_timer+0x50/0x50 [ 509.651686] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 509.657236] ? _copy_from_user+0xdf/0x150 [ 509.661403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 509.666957] ? bpf_test_init.isra.10+0x70/0x100 [ 509.671642] bpf_prog_test_run_skb+0x255/0xc40 [ 509.676245] ? __lock_acquire+0x62f/0x4c20 [ 509.680496] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 509.685367] ? __lock_acquire+0x62f/0x4c20 [ 509.689697] ? fput+0x130/0x1a0 [ 509.692991] ? __bpf_prog_get+0x9b/0x290 [ 509.697077] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 509.701922] bpf_prog_test_run+0x130/0x1a0 [ 509.706155] __x64_sys_bpf+0x3d8/0x510 [ 509.710044] ? bpf_prog_get+0x20/0x20 [ 509.713859] do_syscall_64+0x1b9/0x820 [ 509.717736] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 509.723102] ? syscall_return_slowpath+0x5e0/0x5e0 [ 509.728074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.732919] ? trace_hardirqs_on_caller+0x310/0x310 [ 509.737945] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 509.742960] ? prepare_exit_to_usermode+0x291/0x3b0 [ 509.747984] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.752822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.758023] RIP: 0033:0x457569 [ 509.761218] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.796773] RSP: 002b:00007fbec4fa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.804497] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 509.811762] RDX: 0000000000000028 RSI: 0000000020000000 RDI: 000000000000000a [ 509.819050] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 509.826339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbec4fa26d4 [ 509.833615] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 509.840903] [ 509.840907] ====================================================== [ 509.840911] WARNING: possible circular locking dependency detected [ 509.840914] 4.19.0-rc8-next-20181019+ #98 Not tainted [ 509.840917] ------------------------------------------------------ [ 509.840921] syz-executor1/17092 is trying to acquire lock: [ 509.840923] 00000000769398a7 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 509.840932] [ 509.840934] but task is already holding lock: [ 509.840936] 00000000adfd7a34 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 509.840946] [ 509.840948] which lock already depends on the new lock. [ 509.840950] [ 509.840951] [ 509.840955] the existing dependency chain (in reverse order) is: [ 509.840956] [ 509.840958] -> #3 (&obj_hash[i].lock){-.-.}: [ 509.840967] _raw_spin_lock_irqsave+0x99/0xd0 [ 509.840969] __debug_object_init+0x127/0x1290 [ 509.840972] debug_object_init+0x16/0x20 [ 509.840974] hrtimer_init+0x97/0x490 [ 509.840977] init_dl_task_timer+0x1b/0x50 [ 509.840980] __sched_fork+0x2ae/0x590 [ 509.840982] init_idle+0x75/0x740 [ 509.840984] sched_init+0xb33/0xc02 [ 509.840987] start_kernel+0x4be/0xa2b [ 509.840990] x86_64_start_reservations+0x2e/0x30 [ 509.840992] x86_64_start_kernel+0x76/0x79 [ 509.840995] secondary_startup_64+0xa4/0xb0 [ 509.840996] [ 509.840998] -> #2 (&rq->lock){-.-.}: [ 509.841006] _raw_spin_lock+0x2d/0x40 [ 509.841008] task_fork_fair+0xb0/0x6d0 [ 509.841011] sched_fork+0x443/0xba0 [ 509.841013] copy_process+0x2585/0x8770 [ 509.841016] _do_fork+0x1cb/0x11c0 [ 509.841018] kernel_thread+0x34/0x40 [ 509.841020] rest_init+0x28/0x372 [ 509.841023] arch_call_rest_init+0xe/0x1b [ 509.841025] start_kernel+0x9f0/0xa2b [ 509.841037] x86_64_start_reservations+0x2e/0x30 [ 509.841040] x86_64_start_kernel+0x76/0x79 [ 509.841043] secondary_startup_64+0xa4/0xb0 [ 509.841044] [ 509.841045] -> #1 (&p->pi_lock){-.-.}: [ 509.841054] _raw_spin_lock_irqsave+0x99/0xd0 [ 509.841056] try_to_wake_up+0xd2/0x12e0 [ 509.841059] wake_up_process+0x10/0x20 [ 509.841061] __up.isra.1+0x1c0/0x2a0 [ 509.841063] up+0x13c/0x1c0 [ 509.841065] __up_console_sem+0xbe/0x1b0 [ 509.841068] console_unlock+0x80c/0x1190 [ 509.841070] vprintk_emit+0x391/0x990 [ 509.841073] vprintk_default+0x28/0x30 [ 509.841075] vprintk_func+0x7e/0x181 [ 509.841077] printk+0xa7/0xcf [ 509.841080] do_exit.cold.18+0x57/0x16f [ 509.841082] do_group_exit+0x177/0x440 [ 509.841085] __x64_sys_exit_group+0x3e/0x50 [ 509.841087] do_syscall_64+0x1b9/0x820 [ 509.841090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.841092] [ 509.841093] -> #0 ((console_sem).lock){-.-.}: [ 509.841101] lock_acquire+0x1ed/0x520 [ 509.841104] _raw_spin_lock_irqsave+0x99/0xd0 [ 509.841106] down_trylock+0x13/0x70 [ 509.841109] __down_trylock_console_sem+0xae/0x1f0 [ 509.841112] console_trylock+0x15/0xa0 [ 509.841114] vprintk_emit+0x372/0x990 [ 509.841117] vprintk_default+0x28/0x30 [ 509.841119] vprintk_func+0x7e/0x181 [ 509.841121] printk+0xa7/0xcf [ 509.841124] __debug_object_init.cold.14+0x4a/0xdf [ 509.841127] debug_object_init+0x16/0x20 [ 509.841129] init_timer_key+0xa9/0x480 [ 509.841132] sock_init_data+0xe1/0xdc0 [ 509.841135] bpf_prog_test_run_skb+0x255/0xc40 [ 509.841137] bpf_prog_test_run+0x130/0x1a0 [ 509.841140] __x64_sys_bpf+0x3d8/0x510 [ 509.841142] do_syscall_64+0x1b9/0x820 [ 509.841145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.841147] [ 509.841149] other info that might help us debug this: [ 509.841151] [ 509.841153] Chain exists of: [ 509.841154] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 509.841164] [ 509.841167] Possible unsafe locking scenario: [ 509.841168] [ 509.841171] CPU0 CPU1 [ 509.841173] ---- ---- [ 509.841175] lock(&obj_hash[i].lock); [ 509.841181] lock(&rq->lock); [ 509.841186] lock(&obj_hash[i].lock); [ 509.841191] lock((console_sem).lock); [ 509.841196] [ 509.841198] *** DEADLOCK *** [ 509.841199] [ 509.841202] 1 lock held by syz-executor1/17092: [ 509.841203] #0: 00000000adfd7a34 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 509.841213] [ 509.841215] stack backtrace: [ 509.841220] CPU: 0 PID: 17092 Comm: syz-executor1 Not tainted 4.19.0-rc8-next-20181019+ #98 [ 509.841225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 509.841226] Call Trace: [ 509.841229] dump_stack+0x244/0x39d [ 509.841232] ? dump_stack_print_info.cold.1+0x20/0x20 [ 509.841234] ? vprintk_func+0x85/0x181 [ 509.841237] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 509.841239] ? save_trace+0xe0/0x290 [ 509.841242] __lock_acquire+0x3399/0x4c20 [ 509.841244] ? mark_held_locks+0x130/0x130 [ 509.841247] ? put_dec+0xf0/0xf0 [ 509.841249] ? mark_held_locks+0x130/0x130 [ 509.841251] ? zap_class+0x640/0x640 [ 509.841254] ? pointer_string+0x14e/0x1b0 [ 509.841256] ? number+0xca0/0xca0 [ 509.841259] ? print_usage_bug+0xc0/0xc0 [ 509.841261] ? ptr_to_id+0xd0/0x1d0 [ 509.841263] ? dentry_name+0x8f0/0x8f0 [ 509.841266] ? __lock_acquire+0x62f/0x4c20 [ 509.841268] ? zap_class+0x640/0x640 [ 509.841271] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 509.841273] lock_acquire+0x1ed/0x520 [ 509.841276] ? down_trylock+0x13/0x70 [ 509.841278] ? lock_release+0xa10/0xa10 [ 509.841281] ? trace_hardirqs_off+0xb8/0x310 [ 509.841283] ? vprintk_emit+0x1de/0x990 [ 509.841286] ? trace_hardirqs_on+0x310/0x310 [ 509.841288] ? trace_hardirqs_off+0xb8/0x310 [ 509.841290] ? log_store+0x344/0x4c0 [ 509.841293] ? vprintk_emit+0x372/0x990 [ 509.841295] _raw_spin_lock_irqsave+0x99/0xd0 [ 509.841298] ? down_trylock+0x13/0x70 [ 509.841300] down_trylock+0x13/0x70 [ 509.841303] __down_trylock_console_sem+0xae/0x1f0 [ 509.841305] console_trylock+0x15/0xa0 [ 509.841308] vprintk_emit+0x372/0x990 [ 509.841310] ? wake_up_klogd+0x180/0x180 [ 509.841312] ? zap_class+0x640/0x640 [ 509.841315] ? trace_hardirqs_off_caller+0x300/0x300 [ 509.841318] ? print_usage_bug+0xc0/0xc0 [ 509.841324] ? find_held_lock+0x36/0x1c0 [ 509.841327] vprintk_default+0x28/0x30 [ 509.841329] vprintk_func+0x7e/0x181 [ 509.841331] printk+0xa7/0xcf [ 509.841334] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 509.841337] __debug_object_init.cold.14+0x4a/0xdf [ 509.841339] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 509.841342] ? debug_object_free+0x690/0x690 [ 509.841345] ? unwind_get_return_address+0x61/0xa0 [ 509.841348] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 509.841350] ? depot_save_stack+0x292/0x470 [ 509.841353] ? save_stack+0xa9/0xd0 [ 509.841355] ? save_stack+0x43/0xd0 [ 509.841357] ? kasan_kmalloc+0xc7/0xe0 [ 509.841360] ? bpf_test_init.isra.10+0x98/0x100 [ 509.841362] ? zap_class+0x640/0x640 [ 509.841365] ? do_syscall_64+0x1b9/0x820 [ 509.841368] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.841370] ? find_held_lock+0x36/0x1c0 [ 509.841373] debug_object_init+0x16/0x20 [ 509.841375] init_timer_key+0xa9/0x480 [ 509.841378] ? init_timer_on_stack_key+0xe0/0xe0 [ 509.841381] ? __might_fault+0x12b/0x1e0 [ 509.841383] ? __lockdep_init_map+0x105/0x590 [ 509.841386] ? __lockdep_init_map+0x105/0x590 [ 509.841391] ? lockdep_init_map+0x9/0x10 [ 509.841395] sock_init_data+0xe1/0xdc0 [ 509.841399] ? sk_stop_timer+0x50/0x50 [ 509.841404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 509.841409] ? _copy_from_user+0xdf/0x150 [ 509.841414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 509.841419] ? bpf_test_init.isra.10+0x70/0x100 [ 509.841424] bpf_prog_test_run_skb+0x255/0xc40 [ 509.841429] ? __lock_acquire+0x62f/0x4c20 [ 509.841434] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 509.841439] ? __lock_acquire+0x62f/0x4c20 [ 509.841442] ? fput+0x130/0x1a0 [ 509.841447] ? __bpf_prog_get+0x9b/0x290 [ 509.841452] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 509.841456] bpf_prog_test_run+0x130/0x1a0 [ 509.841461] __x64_sys_bpf+0x3d8/0x510 [ 509.841465] ? bpf_prog_get+0x20/0x20 [ 509.841469] do_syscall_64+0x1b9/0x820 [ 509.841475] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 509.841480] ? syscall_return_slowpath+0x5e0/0x5e0 [ 509.841485] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.841490] ? trace_hardirqs_on_caller+0x310/0x310 [ 509.841496] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 509.841501] ? prepare_exit_to_usermode+0x291/0x3b0 [ 509.841506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 509.841512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 509.841516] RIP: 0033:0x457569 [ 509.841529] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 509.841532] RSP: 002b:00007fbec4fa1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 509.841538] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 509.841542] RDX: 0000000000000028 RSI: 0000000020000000 RDI: 000000000000000a [ 509.841546] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 509.841550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbec4fa26d4 [ 509.841553] R13: 00000000004bd892 R14: 00000000004cc208 R15: 00000000ffffffff [ 509.842524] Kernel Offset: disabled [ 510.741865] Rebooting in 86400 seconds..