[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts. 2020/03/30 07:02:04 fuzzer started 2020/03/30 07:02:06 dialing manager at 10.128.0.26:45583 2020/03/30 07:02:06 syscalls: 2998 2020/03/30 07:02:06 code coverage: enabled 2020/03/30 07:02:06 comparison tracing: enabled 2020/03/30 07:02:06 extra coverage: enabled 2020/03/30 07:02:06 setuid sandbox: enabled 2020/03/30 07:02:06 namespace sandbox: enabled 2020/03/30 07:02:06 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/30 07:02:06 fault injection: enabled 2020/03/30 07:02:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/30 07:02:06 net packet injection: enabled 2020/03/30 07:02:06 net device setup: enabled 2020/03/30 07:02:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/30 07:02:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:04:58 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x88002, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x7f, 0x0, 0x80, 0x8, 0x80000000}, 0xdb, "0a2cef0a18a9a29bb0f7799b9dd93a2d8e7ac9ff3cf3a215b48216ca2e79880da259cd36793596b816f5a7f168235704fac8a5416c55d0c02482011b01fe75b4431e108f1ffd92152d0a90029b36c1251f4e38c4f6119f4d5afc4397009b694454548fb47534e331fbb49451c2a7c3a28732e8e2be8e286247722f6ff7e471ff63d0650b4f4ac7e1a993fabebaa67d37135fe80c0f55a795b2c69f817683c386235a8d127cc8b31c1a89885d0a4c9ce08be7dfd9bacd6c77afafb5f1f42a2c70225f749abb06226428516155f961c1e18501beb1e36d1f0df31a65"}, 0xed) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd(r2, &(0x7f0000000180)={[0x9275]}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0)=0x20, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x0, 'rose0\x00', {0x4}, 0x9d78}) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'netdevsim0\x00', {0x2, 0x4e23, @multicast1}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80001, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000002c0)=0x5, &(0x7f0000000300)=0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000340)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000003c0)={0x8, 0x0, {0x3, 0x2, 0xfd, 0x6, 0x8}, 0x7}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x2b6d01, 0x0) accept4$rose(r4, &(0x7f0000000480)=@full={0xb, @remote, @default, 0x0, [@null, @null, @bcast, @bcast, @netrom, @netrom]}, &(0x7f00000004c0)=0x40, 0x80000) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x10800, 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000540)=""/123) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000005c0)=0x0) prlimit64(r6, 0x1, &(0x7f0000000600)={0x7, 0x8}, &(0x7f0000000640)) syzkaller login: [ 233.360890][ T7036] IPVS: ftp: loaded support on port[0] = 21 07:04:59 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "9afa320e39691ff5", "6641a838a508d63a1201628ac073f88d", "0c42f929", "03bf90fe1ad30c7f"}, 0x28) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x8000, 0x3, 0x4, 0x1000, 0x9, {r1, r2/1000+10000}, {0x3, 0x6, 0x2, 0x20, 0x1, 0x2, 'WP v'}, 0x9, 0x3, @planes=&(0x7f0000000080)={0x7, 0x768, @userptr=0x80, 0x7}, 0x7, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000140)=0xffffffff) syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x6, 0x82601) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f00000001c0)={0x0, @motion_det}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x200100, 0x0) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f00000002c0)=""/164, &(0x7f0000000380)=0xa4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xf6, "9ada10b7730fcf661312a42f419d8bb351b4dd83d830732a58ce34341789197efc1a42e14449f178b6294393bc861e3e1692905eaa84eedf0d1fdcdd58c31c6f8712b5e01654c0f111eb7d375034b79b219836370e49da49ff7689973ecbac9c478a6dd47e31768584812d00629f64a4fbe16c1a9498df6bfbcca25e0d1d058a23438c57dcffaa3fd1eb518e9e6de42591fd36137eca9d8e5cbd4b374a46caff5a20e51505683f595a59471d5419da71c82a45f06fcbd8db2f86ecb6014ab05a356ebaea50f005f17033c3dcac6fc2c7e845816e2dba6a8a55f3a45d33e9c140cb80ad5967adb3b76c496a5bafdc7f76cedc0c4f2284"}, &(0x7f00000004c0)=0xfe) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000500)={0x9, 0x8, 0x8005, 0x0, 0x8, 0x2, 0x1, 0x9, r5}, 0x20) r6 = shmget$private(0x0, 0x400000, 0x800, &(0x7f0000c00000/0x400000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000540)=""/37) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000580)={0x2, 0xfffffffd, {0x54, 0x0, 0x5, {0x4, 0x9}, {0x7, 0xee}, @cond=[{0x100, 0x81, 0x3, 0x9, 0x9, 0xffc0}, {0x5db9, 0x0, 0x7b, 0x1, 0x6, 0x8}]}, {0x57, 0x9, 0x0, {0x9, 0x7}, {0x3ff, 0x1c}, @const={0x20, {0x80, 0x0, 0x9, 0xff}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x39}}, @NLBL_MGMT_A_IPV4ADDR={0x8}]}, 0x30}}, 0x40890) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x140a, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x7b67e7deb35224f}, 0x4000) io_setup(0x3ff, &(0x7f0000000840)=0x0) io_getevents(r7, 0x3f, 0x2, &(0x7f0000000880)=[{}, {}], &(0x7f00000008c0)) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000005f00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005e80)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x639e}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x440c0) [ 233.529595][ T7036] chnl_net:caif_netlink_parms(): no params data found [ 233.671001][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.693414][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.701885][ T7036] device bridge_slave_0 entered promiscuous mode [ 233.721517][ T7156] IPVS: ftp: loaded support on port[0] = 21 [ 233.729719][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.744699][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.754169][ T7036] device bridge_slave_1 entered promiscuous mode 07:04:59 executing program 2: socketpair(0x1e, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x7fffffff, 0x9, 0x2}, 0xc) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x80fd, 0x2}) socket$tipc(0x1e, 0x4, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r3, &(0x7f0000000140)={{0x3, @netrom}, [@rose, @bcast, @bcast, @bcast, @default, @bcast, @null, @default]}, &(0x7f00000001c0)=0x48, 0x800) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000200)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) syz_open_procfs$namespace(r5, &(0x7f00000002c0)='ns/ipc\x00') r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000003c0)={0x9c0000, 0x6f1f, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x990a60, 0xe1, [], @string=&(0x7f0000000340)=0x2}}) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x4}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000004c0)={0x14, 0x88, 0xfa00, {r8, 0xdaa7e5b57c003277, 0x0, @in6={0xa, 0x4e23, 0x1, @local, 0x6}}}, 0x90) r9 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@nl, &(0x7f0000000600)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000640), 0x4) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000740)={0x1, 0x0, 0x100, 0x1, {0xfffffff8, 0x1, 0x8, 0xffffffff}}) [ 233.816519][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.846287][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.915599][ T7036] team0: Port device team_slave_0 added [ 233.995284][ T7036] team0: Port device team_slave_1 added [ 234.065808][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.071494][ T7240] IPVS: ftp: loaded support on port[0] = 21 [ 234.082713][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.108716][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.137680][ T7156] chnl_net:caif_netlink_parms(): no params data found [ 234.152225][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.160815][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 07:04:59 executing program 3: ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000000)) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101401, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='/dev/hwrng\x00', &(0x7f0000000180)='/dev/hwrng\x00'], &(0x7f0000000440)=[&(0x7f0000000200)='/dev/hwrng\x00', &(0x7f0000000240)='/dev/hwrng\x00', &(0x7f0000000280)=':mime_typeprocsecuritybdev\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='{#@^\x00', &(0x7f0000000340)='/dev/hwrng\x00', &(0x7f0000000380)='/wlan1cpusetposix_acl_accessGPL\x00', &(0x7f00000003c0)='procmd5sum-{cgroupkeyring%lovboxnet1^]\x00', &(0x7f0000000400)='cpusetsecurityem0&\x00']) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000500)) r3 = syz_open_dev$mouse(&(0x7f00000005c0)='/dev/input/mouse#\x00', 0x1, 0x204100) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000800)={&(0x7f0000000600), 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x12c, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa7b}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000840)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000880)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900)='/dev/zero\x00', 0x8000, 0x0) bind$netlink(r6, &(0x7f0000000940)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000a40)={0x0, &(0x7f0000000980)=""/132}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000a80)=0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) tgkill(r7, r8, 0x37) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000ac0)={'mangle\x00', 0x59, "795ba4d78f943e936edd7cdbe909ac7b44c5ea6af0fdba08fd50757007ae1c3bef57d9bb1d9d589921e2bc8567b216e06297094d32472be7d60689a7c8e583ae30fd4b387ee33af287714a3a14dbcd9aa9044c5a1c95fa1aa0"}, &(0x7f0000000b40)=0x7d) [ 234.188831][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.368847][ T7036] device hsr_slave_0 entered promiscuous mode [ 234.413439][ T7036] device hsr_slave_1 entered promiscuous mode 07:04:59 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x5, 0x3, 0x4, 0x0, 0x4, {r0, r1/1000+30000}, {0x2, 0x1, 0x1, 0x0, 0x8, 0x1, "fe98a92b"}, 0x80000000, 0x1, @fd, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @remote}, {0x306, @multicast}, 0x20, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'vlan0\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000180)) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xffffffffffffffae, 0x400000) socket$caif_seqpacket(0x25, 0x5, 0x4) r4 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000280)=0x80, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendto$phonet(r6, &(0x7f0000000440)="32625b61d811544cd47246fb50ab2b3756b687a0f8a335e00559f1840ad0bdf7ca376bfcee80aa28fd3e70f0b96c44cec5f24879a50dc24d0298984d70414901aca51a574233313d8669aee969df298206c5b2f2743e3ceffa1bd468260c4ffdf2d4212c68a7a72855b83c798c02dfdb025b36ab4f4c01f28c3bf850c53b4aedb3fcb7abb6f4c47bacd6d61f9d5dc826b2a762", 0x93, 0x4000, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000500)) syz_read_part_table(0x0, 0x3, &(0x7f0000000680)=[{&(0x7f0000000540)="9452129ada34fa0c99b6792ae497bb0f4165231ad3418a0dab516a7434", 0x1d, 0x20}, {&(0x7f0000000580)="f64eeec546e8d14058da3d9156163a8061213b2653ba6f4a5fffe0cfaa0abcdcb00291fa26d0eb29b75605e8ca2736bd24f41982f41377c058a3e3b42b2111de9006dc17d49d1fe6c65e0a2f817c0203f594ef2c46d8c26af37c3eeec05377c02f99fa074d7888cb753434004fb544323168a7906c1a69f7ab883a8c50b7fda3c3077c66e4c84767497cacd6c07ca51983075a4e1ad34b3a66ac040b78d412d4619e80a88778541110c7996defdc85e0bc9e1ffb", 0xb4, 0x1}, {&(0x7f0000000640)="e296de8533deeb81f2d2be366b1ec7d391823f300b2fa1d342751d069113666582a292a9517e565eabaf63f0e8f712d16fe728aa18bf8a28f42e", 0x3a, 0x100000000}]) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700)='/dev/video0\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000740)={0xaf, 0x2, 0x9, 0x400}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000780)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x1, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000010) [ 234.574878][ T7334] IPVS: ftp: loaded support on port[0] = 21 [ 234.734676][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.741784][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.753448][ T7156] device bridge_slave_0 entered promiscuous mode [ 234.798821][ T7403] IPVS: ftp: loaded support on port[0] = 21 [ 234.813038][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.820137][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.833747][ T7156] device bridge_slave_1 entered promiscuous mode [ 234.845180][ T7240] chnl_net:caif_netlink_parms(): no params data found 07:05:00 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x3, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r0, r1, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xff, 0x83}}, 0x30) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) preadv(r4, &(0x7f0000002580)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/210, 0xd2}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/233, 0xe9}], 0x7, 0x0) pipe2(&(0x7f0000002600)={0xffffffffffffffff}, 0x100000) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000002640)={0x3}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000002680)={0x5, [0x3f, 0xe3f8, 0xffff], [{0x9a, 0x0, 0x0, 0x0, 0x1}, {0x1ccbde45, 0x8d, 0x0, 0x1, 0x1}, {0x9, 0x20, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x9c98, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x4e7, 0x0, 0x0, 0x1}, {0xb965, 0x3f00000, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x3ff, 0x475, 0x0, 0x0, 0x1}, {0x7000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x10000, 0x1, 0x0, 0x1, 0x1}, {0x3c24, 0x7}, {0x6, 0x2, 0x1, 0x1, 0x1, 0x1}]}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000002800)={0xa20000, 0x0, 0x101, 0xffffffffffffffff, 0x0, &(0x7f00000027c0)={0x9b0961, 0xfffffff2, [], @p_u16=&(0x7f0000002780)=0x425}}) sendmsg$nl_crypto(r6, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002980)={&(0x7f0000002880)=@upd={0xf8, 0x12, 0x100, 0x70bd27, 0x25dfdbfd, {{'morus1280-sse2\x00'}, [], [], 0x0, 0x2400}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x5}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000050}, 0x8000001) r7 = syz_open_dev$audion(&(0x7f0000002a00)='/dev/audio#\x00', 0x81, 0x131000) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x541c, &(0x7f0000002a40)) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002b00)='/dev/ocfs2_control\x00', 0x210000, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000002a80)='/dev/audio#\x00', &(0x7f0000002ac0)='./file0\x00', r8) setgroups(0x2, &(0x7f0000002b40)=[r3, r2]) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000002b80)=0x6, 0x4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000002cc0)={@mcast2}, 0x14) [ 235.009537][ T7156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.057479][ T7156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.151902][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.159348][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.168077][ T7240] device bridge_slave_0 entered promiscuous mode [ 235.180204][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.188240][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.196476][ T7240] device bridge_slave_1 entered promiscuous mode [ 235.236695][ T7156] team0: Port device team_slave_0 added [ 235.245787][ T7156] team0: Port device team_slave_1 added [ 235.347619][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 235.350597][ T7545] IPVS: ftp: loaded support on port[0] = 21 [ 235.362967][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.369993][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.396497][ T7156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.408293][ T7036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.477672][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.493823][ T7156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.500783][ T7156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.529850][ T7156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.543280][ T7036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.597446][ T7036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.646380][ T7036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.711706][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.774404][ T7403] chnl_net:caif_netlink_parms(): no params data found [ 235.799670][ T7240] team0: Port device team_slave_0 added [ 235.838034][ T7156] device hsr_slave_0 entered promiscuous mode [ 235.883840][ T7156] device hsr_slave_1 entered promiscuous mode [ 235.932713][ T7156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.940885][ T7156] Cannot create hsr debugfs directory [ 235.972202][ T7240] team0: Port device team_slave_1 added [ 236.058157][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.067798][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.094990][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.119510][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.127616][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.135739][ T7334] device bridge_slave_0 entered promiscuous mode [ 236.144287][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.151345][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.159598][ T7334] device bridge_slave_1 entered promiscuous mode [ 236.171643][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.181824][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.207947][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.308190][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.320613][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.330631][ T7403] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.337848][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.348131][ T7403] device bridge_slave_0 entered promiscuous mode [ 236.361523][ T7403] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.369151][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.377486][ T7403] device bridge_slave_1 entered promiscuous mode [ 236.454674][ T7240] device hsr_slave_0 entered promiscuous mode [ 236.512969][ T7240] device hsr_slave_1 entered promiscuous mode [ 236.552486][ T7240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.560102][ T7240] Cannot create hsr debugfs directory [ 236.596328][ T7403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.659965][ T7403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.690997][ T7334] team0: Port device team_slave_0 added [ 236.754314][ T7334] team0: Port device team_slave_1 added [ 236.800877][ T7403] team0: Port device team_slave_0 added [ 236.824533][ T7545] chnl_net:caif_netlink_parms(): no params data found [ 236.837982][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.845673][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.873050][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.886494][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.894371][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.920823][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.935205][ T7403] team0: Port device team_slave_1 added [ 236.962556][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.969652][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.995858][ T7403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.034525][ T7403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.041500][ T7403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.071876][ T7403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.128850][ T7156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 237.204936][ T7334] device hsr_slave_0 entered promiscuous mode [ 237.242973][ T7334] device hsr_slave_1 entered promiscuous mode [ 237.272409][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.280001][ T7334] Cannot create hsr debugfs directory [ 237.305834][ T7156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.416124][ T7403] device hsr_slave_0 entered promiscuous mode [ 237.473015][ T7403] device hsr_slave_1 entered promiscuous mode [ 237.533012][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.540864][ T7403] Cannot create hsr debugfs directory [ 237.547794][ T7156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.627119][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.667470][ T7156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.769920][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.779815][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.801074][ T7036] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.810786][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.819204][ T7545] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.828231][ T7545] device bridge_slave_0 entered promiscuous mode [ 237.841256][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.849415][ T7545] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.858664][ T7545] device bridge_slave_1 entered promiscuous mode [ 237.910797][ T7545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.924847][ T7545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.948470][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.957180][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.966857][ T2705] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.974118][ T2705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.982091][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.991128][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.999809][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.006927][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.014691][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.023537][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.067337][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.078218][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.088087][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.099774][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.111937][ T7240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.167106][ T7545] team0: Port device team_slave_0 added [ 238.181464][ T7545] team0: Port device team_slave_1 added [ 238.202368][ T7240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.248760][ T7240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.318613][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.327491][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.336980][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.345907][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.390124][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.401082][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.430686][ T7545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.442396][ T7240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.526629][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.536724][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.547022][ T7545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.555242][ T7545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.581709][ T7545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.614321][ T7036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.695097][ T7545] device hsr_slave_0 entered promiscuous mode [ 238.725379][ T7545] device hsr_slave_1 entered promiscuous mode [ 238.762296][ T7545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.769862][ T7545] Cannot create hsr debugfs directory [ 238.898554][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.914317][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.921789][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.936398][ T7334] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.036854][ T7334] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.077485][ T7334] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.126023][ T7334] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.223097][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.247759][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.258342][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.273814][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.295476][ T7403] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.334568][ T7403] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.388436][ T7403] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.465271][ T7403] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.542224][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.550850][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.560568][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.568288][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.617443][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.626440][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.635770][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.645454][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.652582][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.697335][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.706109][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.715119][ T2716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.747753][ T7545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.779758][ T7545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.854803][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.868310][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.878284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.905700][ T7545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.964459][ T7545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.014363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.023453][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.032618][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.040953][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.051373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.065160][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.087008][ T7036] device veth0_vlan entered promiscuous mode [ 240.109017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.119113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.128457][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.140635][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.150532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.161612][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.193552][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.209751][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.219256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.228977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.240934][ T7036] device veth1_vlan entered promiscuous mode [ 240.295685][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.304244][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.314620][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.323338][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.331625][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.338772][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.367080][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.386111][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.395136][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.407268][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.416077][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.423227][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.431783][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.440157][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.471133][ T7036] device veth0_macvtap entered promiscuous mode [ 240.484512][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.495124][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.505004][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.515096][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.524501][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.534759][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.546783][ T7156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.574989][ T7036] device veth1_macvtap entered promiscuous mode [ 240.587482][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.605410][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.614094][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.623321][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.632880][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.682378][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.690357][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.699816][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.709026][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.718179][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.726990][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.735928][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.744595][ T2689] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.751651][ T2689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.759538][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.768301][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.776901][ T2689] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.784034][ T2689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.791711][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.800774][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.810181][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.830277][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.860393][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.870495][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.884061][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.893041][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.910369][ T7156] device veth0_vlan entered promiscuous mode [ 240.927351][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.940634][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.954396][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.965377][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.974652][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.993990][ T7156] device veth1_vlan entered promiscuous mode [ 241.010400][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.019233][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 241.027764][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.037514][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 241.046109][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.055693][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.065246][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.074312][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.083148][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.091332][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.100378][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.114515][ T7545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.135034][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.164228][ T7545] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.171061][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.181019][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.189167][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.197560][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.209937][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.244904][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 241.253317][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.263792][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.272653][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.281170][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.289708][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.296840][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.305292][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.314490][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.323280][ T2715] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.330429][ T2715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.338260][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.346958][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.355426][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.364451][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.373355][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.380409][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.409222][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.444138][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.454105][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.462674][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.471144][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.480752][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.490137][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.498693][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.505830][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.513673][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.522722][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.531299][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.540616][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.549408][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.558421][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.655355][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.681192][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.689269][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.707001][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.716159][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.724566][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.733453][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.742498][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.753728][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.837411][ T7156] device veth0_macvtap entered promiscuous mode [ 241.857236][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.871675][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.880910][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.896292][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.908320][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.908999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.909552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.910569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.915286][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.939030][ T7156] device veth1_macvtap entered promiscuous mode [ 241.948384][ T7545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.991052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.993867][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.063325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.064012][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.064620][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.065163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.065755][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.085357][ T7403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.109030][ T7545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.126588][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.126736][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.126850][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 07:05:07 executing program 0: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x47f88b35d6d45366, 0x0) memfd_create(&(0x7f0000000040)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velin', 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2201) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @null}, [@null, @bcast, @netrom, @null, @bcast, @null, @netrom, @netrom]}, &(0x7f0000000200)=0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5074b48cd3913f05, @perf_bp={0x0}, 0x80, 0x0, 0x9a23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) connect(r4, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r4, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x934) [ 242.127459][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.128193][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.128779][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.157231][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.157811][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.165975][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 242.248074][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.282848][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.290581][ T7240] device veth0_vlan entered promiscuous mode [ 242.308500][ T7334] device veth0_vlan entered promiscuous mode [ 242.323180][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.342811][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.361330][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.376341][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.386169][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.395820][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 07:05:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r2) [ 242.421602][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.453099][ T7156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 242.473655][ T7156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.486505][ T7156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.506802][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.517292][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.527437][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.537436][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:05:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020605000a00000000000973797a320000000022000300786173683a6e6574000000000c000780080012405801000007e6000007000400050004000000000005000500020000000000003b0f69da63a2d2e17a817b19f59a6f63e01746ec94cc5d01cf9ddd8ab744dc1d1d8547b32e6f629b0733176b34ab66e9d0ea7bd204569788050a57ec00787cb38a2f846659f1559c2eeacbcc95c54e5f7824b561e54f6d39ecf3e86e605c33b034fcdb6fda65afc974fec3b7e99ec1cc4f70ee30f2ae2de3eef44d111913279cd23b01de733b503d7d7ffc03189a"], 0x54}}, 0x0) [ 242.569335][ T7334] device veth1_vlan entered promiscuous mode [ 242.591614][ T7240] device veth1_vlan entered promiscuous mode 07:05:08 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) sendmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000000000d75409674fdf02ae00"], 0x20}}], 0x1, 0x0) [ 242.695244][ T8316] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.718623][ T8318] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.825525][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.842547][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.865149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.879925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.889736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.907850][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.950287][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.969027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.998440][ T7334] device veth0_macvtap entered promiscuous mode 07:05:08 executing program 1: perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) splice(r1, 0x0, r4, 0x0, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "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"}, 0x1004) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0xc) [ 243.054455][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.069907][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.080482][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.091246][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.115407][ T7334] device veth1_macvtap entered promiscuous mode [ 243.139361][ T7240] device veth0_macvtap entered promiscuous mode [ 243.184808][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.200057][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.248838][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.289022][ T7403] device veth0_vlan entered promiscuous mode 07:05:08 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="c4f47f103fa7"}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r5}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r6}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) socket$inet6(0xa, 0x802, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280)=0xfffffffd, 0x4) 07:05:08 executing program 0: getpid() semop(0x0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000200)=""/108) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) socket$bt_rfcomm(0x1f, 0x1, 0x3) creat(&(0x7f0000000140)='./bus\x00', 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300), 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) [ 243.330982][ T7240] device veth1_macvtap entered promiscuous mode [ 243.372015][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.380357][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.417835][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.433973][ T27] audit: type=1804 audit(1585551908.941:2): pid=8347 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/5/bus" dev="sda1" ino=15751 res=1 [ 243.475397][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.489099][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.503834][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.517305][ T2689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.530366][ T27] audit: type=1804 audit(1585551909.031:3): pid=8351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/5/bus" dev="sda1" ino=15751 res=1 [ 243.540456][ T7403] device veth1_vlan entered promiscuous mode [ 243.570544][ T7545] device veth0_vlan entered promiscuous mode 07:05:09 executing program 0: getpid() semop(0x0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000200)=""/108) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f000095dffc)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) socket$bt_rfcomm(0x1f, 0x1, 0x3) creat(&(0x7f0000000140)='./bus\x00', 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300), 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) [ 243.580817][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.593329][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.603362][ T27] audit: type=1804 audit(1585551909.101:4): pid=8351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/5/bus" dev="sda1" ino=15751 res=1 [ 243.644231][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.671579][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.683231][ T27] audit: type=1804 audit(1585551909.161:5): pid=8355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/6/bus" dev="sda1" ino=15751 res=1 [ 243.724133][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.770437][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.790202][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.799232][ T27] audit: type=1804 audit(1585551909.231:6): pid=8356 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/6/bus" dev="sda1" ino=15751 res=1 [ 243.815401][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.877410][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.901626][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 243.921577][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.944282][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.974816][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.984196][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.002444][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.011240][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.037687][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.047732][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.068177][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.082087][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.093977][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.105311][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.118072][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.142688][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.161340][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.184553][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.198084][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.214864][ T7240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 244.228357][ T7240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.246969][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.266812][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.276878][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.292103][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.300955][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.322331][ T7545] device veth1_vlan entered promiscuous mode [ 244.381621][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.390175][ T2715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.494660][ T7403] device veth0_macvtap entered promiscuous mode [ 244.735216][ T7403] device veth1_macvtap entered promiscuous mode [ 244.781043][ T7545] device veth0_macvtap entered promiscuous mode 07:05:10 executing program 2: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf250700000014000400697036677265300000000000000000000c0099000500000004000000080003"], 0x3}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @timestamp], 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000024000100000014b5f672e0a602"], 0x1}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 07:05:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x21, 0x0, 0x2ff) bind$inet(r1, 0x0, 0x0) socket(0xb, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r2 = gettid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x360, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000001d04000008000a002e000000140012000c000100626f6e64005dc56903000200"], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x0, {r2}, {r5}, 0xccc5, 0x334c}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf1}, 0x3ff, 0x9, 0xffffffff, 0x5, 0x0, r6, 0x7}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e22, 0x800, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x36}}, 0x84}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e24, 0x6, @rand_addr="6498ff7e3468e715f5674cfdba80d1f5", 0x81}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x80}, @in={0x2, 0x4e22, @empty}], 0x88) [ 244.919501][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.928658][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.948805][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.977449][ T8375] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.989579][ T8376] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.000858][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.023990][ T2708] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.055825][ T7545] device veth1_macvtap entered promiscuous mode [ 245.081260][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.185936][ T8377] bond1 (unregistering): Released all slaves [ 245.275843][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.286567][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.300584][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.311180][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.322758][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.333417][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.343612][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.354238][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.365698][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.390550][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.401269][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.411884][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.422384][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.433249][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.444065][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.454482][ T7403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.465282][ T7403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.477094][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.485879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.495245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.504874][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.514068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.525949][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.538591][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.548851][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.559497][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.570198][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.582103][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.592496][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.603942][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.614624][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.625780][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.637854][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.655345][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.665446][ T2705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.677768][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.693718][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.704744][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.715860][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.726246][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.737683][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.748200][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.759131][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.771571][ T7545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.781329][ C1] hrtimer: interrupt took 45183 ns [ 245.783151][ T7545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.800135][ T7545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.813639][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.823517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 07:05:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x3, 0x12000, 0x1000, &(0x7f0000002000/0x1000)=nil}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000000)) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000100)={0x140, 0x7, 0x3ff, 0x1, 0x2, 0x7f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:11 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="88"], 0x1}}, 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000000)='sy\x04\x00emmim\x00tyteM\x1eC<\x00%\x00\x87f\"bb\xe1\xbe\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff]\x8cQ[*\xac\xf8\xff\xff\x00\x00\x00\x00\x00\xf3<\\\xeb\xd7\x82Dm\xb2\xbeH \x7f\tz\xc5\x03\xa1\x7f\xe7\xde\x1a\x84t\xd6g\xa7UP\x9a\x05\x9bo\x16X\x8c}\x00r>$X_X\xa6\xd9\xa1\xee\xfc(;\xd2j\'\x03\x040\x85\xa0{U\xb3\xaf\xeby\xcb\xfd\xdat\xc3}d$l8I\"-\xbd#kk\x1b\xd9\x9d\x1b\xd1\xa9\xf3\xabh\xfc\xa6\xaauX\x15#\xb2i\xb9\x97\x87\xb5k7\x85\x1e?\x8c\xf2xt\x8b\xd8b\x87\xf8\xe8\xb9\x14\n\x1br\x87xU \xcc\x01\f,\xf3\xbb)\x89\xa5.\xee#a\x88\xc9\a\xa0C\xbet\xafk\xe7\xb2\xfdm\r\x83\x916O\x1d\xa7co`\xe3\xe5p\x06\x00\x00\x00h\x7ffo\xf9\xdba/\xf3\x1a%g\xf9\a@\xd3\rS\r\xa0\\\x1a\xfd\x8e!\xdd\x01S\xc8X\x9b\xdeD\xebF\xf4\xc8\x892\x871\x13v\xe1\x87\x7fU\xc7\xde\xf6\xdfL\n', 0x0) io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, r6, 0x0}, 0x0]) r7 = socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfef0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x200, r7, &(0x7f0000000280)="23e067802cce35fa754e29667b159d86b65a6fd6471578f899a07afc69e6600d8b002e9a2e87724f46a74b14fc9f04d85232331b46f82d3357d7d44392369d7223aa2b7168c400e04f77eed318edddf8324e4d118de14ac7820530b70e9c1621cb9c3b6c385bfef491f195c9c047842a1b041b4e38ca43687fe366ae5390b426e8e4ebd24e406cc580caf25ba09f39bd77", 0x91, 0x800, 0x0, 0x2, r8}]) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) [ 246.245205][ T8460] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:05:11 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/460, @ANYRES16=r2, @ANYBLOB="00002abd7000fbdbdf250c00000004000b00110007008b31d33a6366334c8f835fd9e00000002000508005000200040000000800088004000200040005000800070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000881) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001000090468fe07002b0000000100ff0714000000450001070300001419001a00", 0x24}], 0x1) r3 = socket(0x10, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807", 0x11) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140), 0xcc, 0x0) 07:05:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x2000) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xff44) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x3a, 0x0, 0x7, "ed37097c2ee3969756b29fc0ba67d4bb", "aa13e64412e14cc093ead8dcd0a88b28b53ad0752f8dec89a9a33d68a85fa5b8cc71c35e13"}, 0x3a, 0x2) recvmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001c40)=""/144, 0x90}, {&(0x7f0000001e00)=""/65, 0x41}, {&(0x7f0000001e80)=""/204, 0xcc}], 0x3}}, {{0x0, 0x0, &(0x7f0000003380)=[{0x0}, {&(0x7f0000009280)=""/154, 0x9a}, {&(0x7f00000021c0)=""/93, 0x5d}, {0x0}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 07:05:11 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYRES16, @ANYPTR, @ANYRES16]], @ANYBLOB="00002abd7000fbdbdf250c00000007008b31d33a6366334c8f835fd9e000000020005080050002009e78b26b01b43d967c2312040000000800088004000200040205000800"], 0x3}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000927bd7000fedbdf2501000000080001000100010008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900000200000000000099000000000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='numa_maps\x00') ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000001c0)={0x0, "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"}) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80) sendfile(r0, r7, 0x0, 0xa808) 07:05:11 executing program 1: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0xfffffffffffffe42) accept$alg(r1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000500)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2ec, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_EXP={0xa8, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_MASK={0x64, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="8b1734de91573384c1ac4463fe68c630"}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x20}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x101}}, @NFQA_PAYLOAD={0x7b, 0xa, "f37745bde238dfd0624ce10416449e063c9e0e14587278a817551eb6de3dfa454cd786598fd86e41009ef551f716841b2a5e293738c11ebd12dcb0099731f8c15cd2d1129a9d4024fb3ba517cc73c813d10482382a7b9806ca2ae38ee068d452e3c6291a9322f83a12fc65f040381b3543e0b0c2a6ec9e"}, @NFQA_CT={0x19c, 0xb, 0x0, 0x1, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2e49e023}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_MASTER={0x90, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x28}}, {0x8, 0x2, @loopback}}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5}]}}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_REPLY={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @rand_addr="f19564ac8ff06ff72fcf460761cacee1"}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x23}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040090) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e20, @multicast1}}) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x80000000000000, 0x8, 0x0, r3, 0x0}]) 07:05:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300250069000007a2e407edab1d055810000000460b8107a277001419000a0010000000000003f50000003e0000ef38bf461e59d7", 0x330}], 0x1) r1 = socket$inet(0x2, 0x6, 0xf6b6) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x4}) 07:05:11 executing program 3: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x34e1, 0x0) mlockall(0x1) syz_open_procfs(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0xcd, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x400, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="c4d9e44520273fead2c2734408acf2c6e24af1f4a9576b319a47be41cbb89e6403aad894b9c6f35c5b0442cbaf368ce60aa01faca9c9f8b3a9f212de1112aa157a") sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 07:05:12 executing program 1: ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x8, 'dummy0\x00', {'batadv_slave_1\x00'}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000004000000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4810, 0x0) 07:05:12 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15, 0x4, 0x8, 0x400, 0x0, 0x1, 0x0, [], 0x0, r0}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 246.592259][ T8487] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 246.623991][ T8487] device team0 entered promiscuous mode [ 246.640653][ T8492] EXT4-fs (loop1): Invalid log block size: 64 [ 246.649838][ T8487] device team_slave_0 entered promiscuous mode [ 246.692937][ T8487] device team_slave_1 entered promiscuous mode [ 246.725499][ T8487] team0: Cannot enslave team device to itself 07:05:12 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000200)={0x0, 0x0, 0xffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x813, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c6a0ec1c58bdb4b3c994bd3037d601e889ed8ef26d3ba57fe9f6d5d6a74e76fc4b8d5b18f00269ebe701e6e608770db7f194646b9ac15b091c700feb9c22bb619e051f19604dab3e", 0x48, 0x100}, {&(0x7f0000000140)="5e7b0143e494beebd89e190495b7acad860f9d6d6c5a909e731b10c2f51ea5ba602fb3888b2fa2d6dc49fd5c1ff311d23ca5d6d68f6453379581b9c008ea99b7ecdf5813520bdfd649074c95b422b04730601c8266fe2fef1c30ded9cb57a6de180cf84403", 0x65}], 0x40, &(0x7f0000000280)='\x00') ptrace(0x10, r1) ptrace$setopts(0x4200, r0, 0x0, 0x300066) 07:05:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={r3, r4/1000+30000}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 07:05:12 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002cf9ffff9400000000000000f7e735191cb109ecfd9ee50aeb6ee99643eb8ed9eb7086225b6b280b0da7b12d9318a1235e93482069b155cb70abe1263d0f2f674378ca81826f4096ca7ea2c3a9372f9ee4877528c770b10a819d44436c040e806ae2a2783e1e21e28b4db0d85c3dec427b09074532f7279d902af77866b711310a36931eae5253ea6bf134268649e51fb632c312b05efc69b2de8de085db3957e9a6e6cf667964819de170b87a16e460057551a69454dc6a6849b1746a3e61df0a4ac09b78e3c08000e052b066ca970eda34d3071fbd8a29a1f1dd084589417befc3ac48449c5069a211ef932bf575c48086e156fcedcfc67ea96ad6b294051dcad48234bc416d8ed04192d30d4400149949270c09672a048be8389a0ea6164ba646dfd0b68d7713"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f00000002c0)) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x321080, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6d1bb17ef2cbee3a}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}, @IFLA_CARRIER={0x5, 0x21, 0xb7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7f}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_MTU={0x8, 0x4, 0xe1df}]}, 0x60}}, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000008c0)=""/4096) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0}, 0x10) 07:05:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000373c30a7841ddf6a27828e9f768ef251e3a4cff83b73ac6563e62e0409dd6cc59cefabfc7d41481694edad02ec02d0d8d61d0afb5e4ff0a32d675c0bcedae04cf91d0a8fe5d32b1eb359dcb1b20ccbfc0a7570f5140356adb779b655c97e3bd50179add6b94b7a98c50469efd5999e91d8b0bf733a2b2acad8758e288867a259c69ed0", @ANYRES32=r2, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="c4f47f103fa7"}, 0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000280)={0x2c, 0x0, r2, 0x15}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000680)="17fe818079fe399298699c", 0xb}, {&(0x7f00000006c0)="be14fbc37d", 0x5}, {&(0x7f0000000700)="9ca6fd01a3f9e9693681c5b249a184425fb5559c35a90fb321a217ef361b", 0x1e}, {&(0x7f0000000740)="5a75cf12e58b6d0e94041ba06b60161d8c45193e37ec0cbdb75e54f784ce4f21a9af8f3d77ccb0ee93c5c6fb0d4cb816e13786cc63da9573fc228eeea1e682c417a0aea25fd6fbbf23d683eee84c9336639c5008f226c0333785a584d69215d1a0d805ab8ff31e4e6be8564aad7cab5361e1e72e95b9aa69ff351512c4e5c3053224d7416526b26c5fcd0aebebb758245c355578f680172721cdc1dd66a622487ff081cbebe2225715b9f86d428fcf8bcc1f25903b725e2fcc26a12b83606a5d938f86d0a97e913abcf86aebec1709c98b", 0xd1}, {&(0x7f0000000840)="521bf8954f7bf4b2c551c5429cab1d232d72bc6df5c5b198a0f4ac67c1ffce3056bbf56888c97c1182bc2e1c2144fab47e3317f868e55a61d5f30a3cd5705ab729a9f83eaf35f83c56", 0x49}, {&(0x7f00000008c0)="6c65b236d0fa367fd5471f24d139f3a08f35b6d50a04a964178fd30ae528b14cbd90f5c10f7bb22791d4949fdbb09cd100e2e5fbdcb4b0bf7bf98f2223124fcde25903e1c7ecbb5cd4ccf0c4b719b2f5f6350077625c0a155ea7fdab04a6806552b6c30f8af69a6eb24d6a63a0eb429a713b16f90081bf27ec1d4b443aeceb35a5ad70a069d1813684a069f5c689d38af152669f5c99e2ca4460a24fea26bdcb3acbfb", 0xa3}], 0x6, 0x0, 0x0, 0x80000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000080000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000024000000000000000000000007000000940400004410889000000004000000000000000000000000110000000000000000000000010000001f00000000000000"], 0x98}, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f00000005c0)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f00000004c0)=""/229, 0xe5}], 0x3, &(0x7f0000000b40)=""/136, 0x88}, 0x20000020) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) [ 246.993655][ T8511] NFS: mount program didn't pass remote address 07:05:12 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 247.084088][ T8516] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:05:12 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='k'], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000280)) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x880002}, 0x40089, 0x1000, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c) close(r2) getsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000080), 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x1) 07:05:13 executing program 2: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYRES16, @ANYPTR, @ANYRES16]], @ANYBLOB="00002abd7000fbdbdf250c00000007008b31d33a6366334c8f835fd9e000000020005080050002009e78b26b01b43d967c2312040000000800088004000200040205000800"], 0x3}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000927bd7000fedbdf2501000000080001000100010008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c009900000200000000000099000000000002000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='numa_maps\x00') ioctl$USBDEVFS_GETDRIVER(r2, 0x41045508, &(0x7f00000001c0)={0x0, "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"}) bind(r0, &(0x7f0000000000)=@hci={0x1f, 0x4, 0x4}, 0x80) sendfile(r0, r7, 0x0, 0xa808) 07:05:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000500)={0x6, &(0x7f0000000180)=[{@fixed}, {}, {@fixed}, {@none}, {@fixed}, {}]}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200501, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b503000000000001000004"], 0x3}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) [ 247.843991][ T8541] IPVS: ftp: loaded support on port[0] = 21 [ 248.377923][ T8544] IPVS: ftp: loaded support on port[0] = 21 [ 248.522543][ T30] tipc: TX() has been purged, node left! 07:05:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x40000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000500)={0x6, &(0x7f0000000180)=[{@fixed}, {}, {@fixed}, {@none}, {@fixed}, {}]}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200501, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="b503000000000001000004"], 0x3}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x24000001) [ 248.862897][ T8594] IPVS: ftp: loaded support on port[0] = 21 07:05:14 executing program 2: r0 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000140)={0x76, "42544c76a34c505953120416096a432d77e2115f44efa08d0f3d31d1c36f4e33024563ad629e16916ba451d4ba080b51107a0d33b29b7c692b61792a4392d3adb8af19dbd373cf15cd27d11e65f8f40d8cfd93bf4fe078f6ff989abb48ef759090a7d244af2aa98f8738e5b02dd6cf9d042af73aeea9"}) close(r4) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16=r4], 0x16) shutdown(r0, 0x1) 07:05:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0xa, &(0x7f0000001180)=""/4125, &(0x7f0000000040)=0x101d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000400)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000825bd7000fbdbdf25040000000500040002000000140002006d6163766c616e3000000000000000000900030073797a300000000005000400020000d7a90002006261746164765f736c6176655f3100000900010073797a30000000000900010073797a32000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004090) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x4000000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0x0, 0xfb6d1d2b1ccb666b, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x104, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) set_thread_area(&(0x7f00000003c0)={0x7fffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f0000000000)={@fixed={[], 0x11}, 0x1, 0x2, 0x101}) 07:05:14 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280), &(0x7f0000000780)=0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x23, &(0x7f0000000100)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0f872fb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0xf7}, {&(0x7f00000002c0)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e009542c99c64517c889681a7be921d530aa430c15dda300d9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f93dfe77af28d06043eb76c521af1f865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b8c1623c6c46f8baa6b50ee5cfc2456f5b68b8ec89acf489738abc1790a1a2f73de8902794548964c18b0ad5245dbd4c5afbba32d91fab46da4b75f73", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x12}, {&(0x7f00000003c0)="5683eb0a6eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0xef}, {&(0x7f00000004c0)="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", 0x2b7}, {&(0x7f0000000080)="84a8b097573042bef1d51ee1fc74fa7d29a11b474350875de3b3d15a557a34a514a151c4b42860cfa28182b969c16aabd0842d8c10fac5adaf25855bfe64ca9ead36601868860c1401be66c801bfcc4869c06a0892e2"}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000001) 07:05:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x1f, 0x80, 0xad}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x1b, 0x5d, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x29b}, [{}]}, 0x78) 07:05:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={r3, r4/1000+30000}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x21f8}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 07:05:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/460, @ANYRES16=r5, @ANYBLOB="00002abd7000fbdbdf250c00000004000b00110007008b31d33a6366334c8f835fd9e00000002000508005000200040000000800088004000200040005000800070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0xfe000000, {0x8}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x2, 0xc, &(0x7f0000000000)=""/5) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ip_vti0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:05:15 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 07:05:15 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x1, 0x0) write$9p(r0, &(0x7f0000000000)="0600000000000000c9b90003060000002a1f5a09ab8383afd2da1a3487f2067fde18fa64249e1dabdd9514480a16f3733d18f833b3aacfe8ce51b9f9218a3c9e3d0000000000000000000000000000000000000000000000000000001d9a12c712bcbca4d605bb4d", 0x68) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = accept4(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0)=0x6, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0xf0000, 0x0) [ 250.033015][ T8646] dlm: no locking on control device [ 250.051802][ T8646] dlm: no locking on control device [ 250.148356][ T8644] team0: Device ipvlan1 failed to register rx_handler 07:05:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2800c0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r2}}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200080, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = dup(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000080)=0xefc, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) 07:05:15 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x101000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40186f40, 0x76006e) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x4, 0x0, 0x7}) [ 250.319367][ T8658] ubi0: attaching mtd0 [ 250.333428][ T8658] ubi0: scanning is finished [ 250.344014][ T8658] ubi0: empty MTD device detected [ 250.508778][ T8658] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 250.534598][ T8658] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 250.568347][ T8658] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 250.613485][ T8658] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 250.647965][ T8658] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 250.678678][ T8658] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 250.706871][ T8658] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3282567420 [ 250.739133][ T8658] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 250.778608][ T8663] ubi0: background thread "ubi_bgt0d" started, PID 8663 [ 250.815380][ T8658] ubi: mtd0 is already attached to ubi0 07:05:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x840, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00'}) [ 250.982351][ T8652] team0: Device ipvlan1 failed to register rx_handler [ 251.189852][ T8645] QAT: Invalid ioctl 07:05:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/460, @ANYRES16=r5, @ANYBLOB="00002abd7000fbdbdf250c00000004000b00110007008b31d33a6366334c8f835fd9e00000002000508005000200040000000800088004000200040005000800070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x0, 0xfe000000, {0x8}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x5e}, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x2, 0xc, &(0x7f0000000000)=""/5) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000200)={'ip_vti0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 07:05:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2800c0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r2}}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200080, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = dup(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000080)=0xefc, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) [ 251.495171][ T8645] QAT: Invalid ioctl [ 251.637643][ T8684] team0: Device ipvlan1 failed to register rx_handler 07:05:17 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0xfc}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = semget(0x1, 0x2, 0xa0c55c25df847034) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000200)=""/4096) 07:05:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2800c0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r2}}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="bd", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200080, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) r5 = dup(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000080)=0xefc, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) [ 252.343914][ T8684] syz-executor.2 (8684) used greatest stack depth: 23088 bytes left 07:05:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) mq_unlink(&(0x7f0000000040)='\x00') r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000009, 0x8010, r5, 0xd5702000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) sendto$packet(r6, &(0x7f0000000080)="e1ab59b1881aca754b146c3d4d23a080a5a6cacd9b1710f8f0f9cc1c111858867ed33d1e95d1e9706ffa162a87fce4e805832507704487973fc4f756a82e761ad231a49c169123135780b94aadc81005cf8c28fb4ef66f85aa4bd3d77a107b00ca6e1573985d2bf0511feee126f9c8221b52f2ff2a1556f0e605fe7fecaf47e34ac45b1b62680872e984465f759eb73cadf7b1ce95423af299de167a0982c5bd389059999a494dd8109345e950313d5af9a3c0b8a7512703d9e16b5c5a5d075653f971b944cb489a", 0xc8, 0x8000, 0x0, 0x0) 07:05:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500010000000500170000000016"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 07:05:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) quotactl(0x101, 0x0, r1, 0x0) 07:05:20 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 07:05:20 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x13) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x592) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client='access=client'}]}}) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000000)=0x8) 07:05:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x140f, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="24726657e096748a190d4e948f0d0717223766c6afdbd0cc341f6d38b4ff10"], 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400007d62438a6a5704365c8e6365390d00", @ANYBLOB="000000000000fb"], 0x2}}, 0x4000005) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000280)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(0x0, 0x319643, 0xbc) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x82800, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000140)=0x47b) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x5a8356036fd82edc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x82, &(0x7f00000000c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r6, 0xfffffffe, 0x30}, 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x54142, 0x0) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}}, 0x0) 07:05:20 executing program 2: pipe(0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x0, 0x108, 0x318, 0x318, 0x318, 0x9802, 0x0, {[{{@uncond=[0x2], 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x450) [ 254.686248][ T27] audit: type=1804 audit(1585551920.192:7): pid=8732 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir086846240/syzkaller.xb6NUi/9/file0" dev="sda1" ino=15809 res=1 07:05:20 executing program 2: pipe(0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x400, 0x210, 0x0, 0x108, 0x318, 0x318, 0x318, 0x9802, 0x0, {[{{@uncond=[0x2], 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@rand_addr, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x450) 07:05:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x4, 0x2, '8EV', 0x80, 0x1}) socket$netlink(0x10, 0x3, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040), 0x6) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r3) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x284a02, 0x0) [ 254.972957][ T27] audit: type=1800 audit(1585551920.192:8): pid=8732 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15809 res=0 07:05:20 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0xf000000, 0xa9, 0xfffffffe, r2, 0x0, &(0x7f0000000100)={0x990904, 0x6, [], @p_u32=&(0x7f0000000040)=0x60}}) getsockopt$inet6_int(r4, 0x29, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r5 = socket(0x9, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e50d000d9ffb4f0600460000000004183cc11c960d17506bf2d3cf7131225924802f498bc810e40676ce0ed93dfe44e1fe5020c5fd06f0355488e8062710fd3023c7dfcc8b6fab44da064d5929b8a98154a1f8b2d525b277ada4553b49a70d6b7cd304ed029b", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001"], 0x3}}, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000240)) splice(r0, 0x0, r1, 0x0, 0x101000000, 0x0) 07:05:20 executing program 2: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) pkey_free(0xffffffffffffffff) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1f) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0xd8, 0x0, 0xd8, 0x0, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x6, 0x0, 0x50}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x30}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 255.205372][ T27] audit: type=1800 audit(1585551920.712:9): pid=8740 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15809 res=0 [ 255.361100][ T8755] xt_ecn: cannot match TCP bits for non-tcp packets 07:05:20 executing program 2: clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0x1, 0x8, 0x4, 0x80000000, 0x8, {r0, r1/1000+30000}, {0x2, 0x4d96263414b2ef2f, 0x9c, 0x4, 0x40, 0x6, "2e6101c2"}, 0x6, 0x1, @fd, 0x6, 0x0, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xc4, r3, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc7f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x0) socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r6, &(0x7f0000000140)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) close(r6) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000280)=""/116, &(0x7f0000000140)=""/57, &(0x7f0000000400)=""/165, 0x4000}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000100)='keyringvboxnet1\x00') r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x20244}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x3}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x68}}, 0x0) [ 255.402124][ T8756] xt_ecn: cannot match TCP bits for non-tcp packets 07:05:21 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x87}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0xffffffffffffff19, &(0x7f0000000080)='nodev\x00'}, 0x30) ptrace$peekuser(0x3, r3, 0x934) process_vm_writev(0x0, &(0x7f0000000280)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/37, 0x25}], 0x4, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, 0x0, 0x8, 0x1000003) 07:05:21 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xfffffffffffffe5f, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 255.672350][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.864993][ T30] tipc: TX() has been purged, node left! [ 255.874050][ T30] tipc: TX() has been purged, node left! [ 255.893436][ T8739] QAT: Invalid ioctl 07:05:22 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 07:05:22 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000580), 0xefee) open(&(0x7f0000000040)='./file1\x00', 0x800, 0x2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 07:05:22 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:05:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000280)={0x200, "4c98a0dce75731feda667f50ebb8bf5a8215edf0bbc08d575c3f55e0ce962803", 0x1}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_DEBUG={0x8}]}, 0x44}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x800) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b0001006272696467650000600002800c002200000001000000000005001600010000000c001f00090000000000000006002700030000000c001e00358a00000000000008001a007600000005002b000500000005002a00000000000500250001000000080001000200000008000a00", @ANYRES32, @ANYBLOB="0e1bbd6090d7eddeec1181ef44e17685c8d384f2b1ac222608a8443dc17627399d1c49c0985e2b24d83ddc3f8194b60e6087d19927c4c46316bc721c8f69583d525977555172e59a96e02ccb095802a65cb8569caa2269f84430ab4fdfa068a9bd3b34c915cf614a"], 0x5}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x480200, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ioctl(r6, 0x1000008912, &(0x7f00000001c0)) 07:05:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff00}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000080000000000000001c00000000000000000000fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000", @ANYRES32=0x0, @ANYBLOB="00000000000000f10000000024000000000000000000000007000000940400004410889000000000000000000000000700000000110000000000000000000000010000001f00000000000000"], 0x98}, 0x40000) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x1ff) 07:05:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) fsetxattr(r1, &(0x7f0000000040)=@random={'security.', 'wlan0wlan1\x00'}, &(0x7f00000000c0)='security\x00', 0x9, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xd}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) [ 257.788781][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.796830][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state 07:05:23 executing program 2: mkdir(&(0x7f0000000740)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7570706515f778726b646972024774065c6fa09d88583d2e2f66696c65312c6c00"/42]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 257.831876][ T8822] device bridge0 entered promiscuous mode [ 257.969686][ T8826] overlayfs: unrecognized mount option "uppe÷xrkdirGt\o ˆX=./file1" or missing value [ 258.039800][ T8824] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.063651][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.070994][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.078455][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.085639][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.197654][ T8826] overlayfs: unrecognized mount option "uppe÷xrkdirGt\o ˆX=./file1" or missing value [ 258.384081][ T8822] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.391356][ T8822] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.489407][ T8793] QAT: Invalid ioctl 07:05:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000000004, 0x80000000000000}, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) symlinkat(&(0x7f0000000140)='./bus\x00', r3, &(0x7f0000000180)='./file0\x00') 07:05:24 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0) socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_DUMPABLE(0x4, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x0, 0x200, 0x8, r5, 0x0, &(0x7f0000000080)={0x9b0972, 0x8, [], @p_u16=&(0x7f0000000040)=0x3f}}) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "bcfdea4ec8b399a3", "01f0d0967219e47e5ba2f545cfb949e279f806bb56f045d9de6ef9fc95a6749b", "942497eb", "75354a68ade772a7"}, 0x38) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00') 07:05:24 executing program 1: mkdir(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="70040000feffffff020000000000000004000000000000000000000000000000feffffffffffffff07000000000000000500000009000000030000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="635400005e03000000000000060000000000000009000000000000000200000087910000790000000000000009000000000000000000000000000000010000800000000016e800000000000003000000040000000200000000000000850c0000000000000100000000000000ff7f000000000000060000000000000023f4ffffffffffff02000000b8030000000000100100000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000200000000000000060000000000000000000080ffffffff000000001bd600000500000000000000030000000000000001000000000000000500000000000000800000000201345249b9d1213200000001000000010000000700000000000000ab05000000000000040000000000000000000000000000007f00", @ANYRES32=0x0, @ANYBLOB="0900000020000000000000000200000000000000a90b00000000000001000000010400002d000000000000000600000000000000010000000000000007000000000000000300000000000000070000000200000005000000000000000700000000000000000800000000000002000000000000000000000000000008040000000000", @ANYRES32=0x0, @ANYBLOB="0000000008000000000000000100000000000000090000000000000000000000fcffffff06000000000000000200000000000000aabc00000000000097d800000000000002000000ca000000020000000000000001040000000000002f0000000000000001ffffffffffffff010400000000000001000000000000000700000081ffffff00000006fdffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000300000000000000020000000000000008000000000000000700000001000000236d643573756d0004000000000000000200000000000000454c8d110000000000010000000000000080000006000000040000000000000002000000000000000100000000000000ff7e00000000", @ANYRES32=0x0, @ANYBLOB="070000007f00000000000000050000000000000006000000000000001b0000000900000073797374656d766d6e6574316367726f75706d643573756d"], 0x33c) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x208000, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x3) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000000)={0x0, 0x5, 0x21}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f00000000c0)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a0001", 0x17) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{}, "7ad489c0e0f7b2b5", "d1d00352c9cf4e8e09027995eb129a1258fb55c5bd2ea890ebb1f99b6bb33871", "82dd2fde", "5b9dd6090d62da27"}, 0x38) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe2", 0xaf, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'crct10dif\x00'}}) keyctl$instantiate(0xc, 0x0, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'cgroup.procs\x00'}, 0x23, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) 07:05:24 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000100001040800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c000200100000001300000008000500", @ANYRES32=r1, @ANYBLOB="08000a000a3d670bce5611111a912de9ab3f82cab17c3f24ac602bd38ae93a3b443825ebd4b5a7fe0d931d8d51022eb65cd09eb0e0abf7679faacc568e69dbe64755e2", @ANYRES32, @ANYBLOB="9dba7f1bc2419c98d2fcba9a7f9810440d18d807728fdc5b475150a2a34cf26d5324d2f7cb8e1c237477bfa3c969d28047b57c8c0c921ee7d357ae594755a7b6d3bdcf88c93ca94eb9f52907"], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x0, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 07:05:24 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000003c0)={0x1, 0x3, 0x1000, 0x5a, &(0x7f0000000140)="f98ddecbe4a4cba0c08fa9e28c474d709e6515d5f056ada895315d7b0e2aee37ba4bd0bd9625361565c60a83dda61eab3a02ed58ff3cf19a2c669084855dcf40b013c977dd83d658c18b1e7e0955cbd40f87fa1d159913c7bd50", 0x59, 0x0, &(0x7f0000000340)="499667d65d842d72d339b0cdbab6002746be96342459417258d396040dc202a013c76322cdfa635a1b0c988bc4bfb33dc6a05d852b5aa42008ad1b038a1ecd02841d33c640133f53f3fadfbf7895cda7ad780fce511aafa155"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x1a, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150608000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b5173514", @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x78) exit(0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20101, 0x0) pipe(0x0) 07:05:26 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) 07:05:26 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0xff, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c1}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x4000002, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002400290800000000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="c76a1821639e9e126cd3f457b559e59f8fbcc26bc2d8c1d2bd2ca3c408bfc8142ebd08adb4376f34600c9347c67f5fa5e70892b40447a431f23a1fb1807907dbea"], 0x1c}, 0x1, 0xffffff7f0e000000, 0x0, 0x40180}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) 07:05:26 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x121000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x100000000011, 0x800, 0x0) bind(r1, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) recvmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/145, 0x91}, {&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000040)=""/28, 0x1c}], 0x4, &(0x7f0000000600)=""/110, 0x6e}, 0x3f}], 0x1, 0x140, &(0x7f00000006c0)) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r3) fchown(r2, r3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) read$char_usb(r5, &(0x7f0000000200)=""/163, 0xa3) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r4}, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 07:05:26 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000100001040800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c000200100000001300000008000500", @ANYRES32=r1, @ANYBLOB="08000a000a3d670bce5611111a912de9ab3f82cab17c3f24ac602bd38ae93a3b443825ebd4b5a7fe0d931d8d51022eb65cd09eb0e0abf7679faacc568e69dbe64755e2", @ANYRES32, @ANYBLOB="9dba7f1bc2419c98d2fcba9a7f9810440d18d807728fdc5b475150a2a34cf26d5324d2f7cb8e1c237477bfa3c969d28047b57c8c0c921ee7d357ae594755a7b6d3bdcf88c93ca94eb9f52907"], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x0, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 07:05:26 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000100001040800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000000001c0002800600010004000000040003800c000200100000001300000008000500", @ANYRES32=r1, @ANYBLOB="08000a000a3d670bce5611111a912de9ab3f82cab17c3f24ac602bd38ae93a3b443825ebd4b5a7fe0d931d8d51022eb65cd09eb0e0abf7679faacc568e69dbe64755e2", @ANYRES32, @ANYBLOB="9dba7f1bc2419c98d2fcba9a7f9810440d18d807728fdc5b475150a2a34cf26d5324d2f7cb8e1c237477bfa3c969d28047b57c8c0c921ee7d357ae594755a7b6d3bdcf88c93ca94eb9f52907"], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x1c) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) clock_gettime(0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x0, 0x300) r5 = dup(r4) setsockopt$packet_int(r5, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 07:05:27 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1d, 0xff, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x400c1}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x4000002, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002400290800000000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="c76a1821639e9e126cd3f457b559e59f8fbcc26bc2d8c1d2bd2ca3c408bfc8142ebd08adb4376f34600c9347c67f5fa5e70892b40447a431f23a1fb1807907dbea"], 0x1c}, 0x1, 0xffffff7f0e000000, 0x0, 0x40180}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x802, 0x0) 07:05:27 executing program 0: syz_read_part_table(0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000480)="0200ee7e00ff01000000ff070000034c0000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}, {&(0x7f00000004c0)="8f5670ae0eedf138a389ea2e5cd8c0d2e7769dabaed37c33c3b90ce6e9529dbf16d497600cf18c0bd2266bb0f6067f0ef8a53c783ba240328f9fb3ae8aa370cb7446114238923bad6f9c895d3d1a6dac934f2a1f09c049d85928f81863ae1ecd36bb855629e24f1c1a8d33caad680dd21f83d5537a0b44f933a2f26ca661cfb92e9c7b57350d03373700a14c60272c81e665dab62bdac4409852d747cafac7109358ff910bdb4225d4c57d99b19b771683004beeab8f500f239f27e43e2bf0a66846ba6f8054eba74bc3712520bb35fd75b05819a89028b411ac74c5fc17c3e1a0cf8a4e81b38bcc6941bf6c2fd52930243af8ab1bede508ba9382585de2b8f1a4395d2e55d8fac30e0cf6841af2ce05bb5c29c28f28ca6bf9962e6856709e6171187b079bafd9a988c4418f682ea20800877a56622ee315173686fc2b20d03a7c3ce34d3ed4cbcda787e2715d19970b55cfad76d416a742ff8e7430187c4b2a8dd2099e12b2ceb671a9df30a3beb707be2212218b1a36c97ba42b2cf1afefa0db74e3f2f7529b98c796110a964deb5484e7c512a84d890c5953e77ec6f6179e76e0fcc8749f11c704989ac00f3bb7face75e4f139cb119592eafcbf2fed5ebf49cf779a581ff138aa5b99b7a88e4382a8654aceba7734506ba767131a77d08fa527a9e31464905f69ee5ae0b34068c5aace9f27c311905543e28f9df24128e4669227ee004bcf8292bd96de8dcf47aa58594944bf8fdf748b85c7e185404750f235a6d490b5a88c416fd31c4ad5b1c05d527f7a71364548a752a351748a8bc190649dc6501926c107839518a208f4d59330c798eb7b7dab931e56d888345d2661c67ebb63c54e4bcbeabdd108d84f32a12b7db7728ee591707e90c982417ecedb56831f12172509f0e654223371bee74617ed1f9437842a387b449cad0619609b962afea4e3fbf9a9e3b0259833a3aaeea0ff0589be776af0fdb1fd6e2d09edb553cc0dd388e82c22c6b5a9273cbf7d421e22f1a59c1824da9dc740197847711f23bd80dcbeae6c510df4c73a47f9b6f57fddd5bdd9a528b1403625da7b50fb1da960aa020637651bc07b41396958abe5b181d37e515bf222baa1d40a7d76aff013c9ca98aa362b38fdaae79cba3ebc014b4f4f65b96aba39b634d0330eb6528fe7a1002dfc02ae8967bfd2279dbbb0fc8810b9b33522e05489dbf3fa5afa980ef15e1c71e63f8cb789a270ca573919838b880de42d3148e2fa521442a73ac14b1c3219664b376e56b20df9f824497e5556ade54df62d3d3f76e37f4203ab3a2429652bf360042cb21beca2b545126e2f480cfe144c25fa881d14c8a1e45e307cf73f11b85875e914d02d55bc2534c810c7745728095164d14ef2a65817dd9af226101a444035e0baeca75d8d04cccc59e43665ce66ca08bf388bbabe52e56f96f1485274cea1aac04c00456191751e71019a9a76149bca4f1780ab2e9728a17a5c4bdaf26f89064dbc714a624dff1e153be18441cdfba2d2a010c55e6c4ae3e4ab2e64b4f518d3a99496e7119bd361212f0f6412be5146911804b2144f8222422477110583b8b59deb6869c3410452f258351dac515aca117f6b27b112a82c4f296019c38dba72b7b6169de9f3689713cb97a34fac93dfc1fa03828483e6dae3f31cfdff73b734c0d48f858836d93f6aebc250a7710b984a08f375d6136c7334ad0470c46298f1e545ef1da1f117ff5bfaafb1a09eeae567a59ab0963af4101e93e6876f4e12424b2670251816fe23b2df45a552c96b6d5bff885564a764676284e2db49c95f74ec705e24ed61fcd41095f7d210eb3991a7724a6e736b7f2a723d0f6e225f41be9004c0a8e7ed156ac09d4ef1760b9364a315fc8ac2aabf1e42d2bbbe42f0394cafc6674b0c57233f63c180ec3d591dca13e0ba71626197f10a82da116b4a236c070c593d1b6cfb67d4c4f8f5626176db6f3fbf73e639f1f565bb23cec7e27c92c7bc6607e1efcfa9779e79c5d22d48f428eb864aaba046f77fb4ccc49f525b1c4681cd2a203f33e363f4accf3321540bbd9cc88adf83cfe730c9083436e6fdc322ed79becc102defffbdbbe99df6ab7aec375a31c4dcb2621c8d1416fdd70c4097749e92d5e0b84967cb79347d9c8b52b92ea6b229c451234d170a380657f51d8848a13e9a761594b06e83f7276fc4e7910039ff084b9179cc4fa7af2a85d44e62d5c70694a7338ff2e795377874c3120d82ab19bfc5880791d1b89232aceb4e504a728a8e8f761903783789240df8f9843b81259df1c7b930ac13f4bbde03de1714261b02d78008f3a51c50260714738488b788d5430e76c4209eeb65ec67c398e08a22c1e55806304740659cc2854e32d781c4742cd2b354a6022dbaeb00f189bfd398e57f0267278e19df83f198ec354b33e17aa2627608da05b252ebd7f2f626058bcce4d6c14066e7b48591b10f428d142ad0743d7c195fd67e765868623002d544252c73c62eb33164c290b7ce3a9bf62215bbba9c3c83c979a835d04b2748b32ee90203bc0e0f68b1a911ef40267cbd785207ea4a42b5de4859bf61a92d811ddbf1204bed747b00474e146b3bf3fc855d4088b85223d96f04858ab60e387da8c430bee93ae7d6760a5b9d19474ed99fd731f3f7d89ee65381538381e56ae25f6e879ac6d74f277e24e0f470ab50618299868202f34603133eb067c6a47845309f75eaaece14121115f6f9500ad9946a4dcd81049ad8ec068255d60f34159a228d1c976b3675d4923f87d7b514d1433036fa7d710de901a08429a65ea0f98f894e4e760a363b00d06813c8c64632b699ebc4bdd93c7d6335ae96012478cba895f619a01eb41a9224a9abbe4d914eb74c80e46b24f37bfa78d0b61eadfe4f07c51662499f1d90e953fc9bfc408ee8efd293b2b8ea338516439f98a7d5112d9f3a8a897ff6e907fd9e7c3e053a4de187b2e2b7a482677b8991fd1f5b5502b0918e5a3df9d21f1e9d0eeda110dd6f3dde30d28881e13652f20f7d6151bba28ff0183a4e4788a74721dd7bf0176b13e5a3e268ba19149226f6d7a9a9b443d28018671741b912f5dbdb3a8bb3747ad327235ef065fef23f9fcca544c1e148a1554c1ff9dc449a071310762a8f4ecf946f96c0c07fe4519be288c94d1e8ab6cc28f85e330e7a8564b20652c68c3d19e228b0175e915ceccf56d9eb36547a8c5e26bcd95bd11cc40a84bdc9d1711b5057504c6d0922ec53735a1dbfdf94acb0d651224f3200e7d34c8194dafbc24f0ae34982e940b9c5c0a7f8969ba6e872ef37b4ed7a9e77887a2a9a6ccac83049b6189f41ca0affc6fb1049de7c15d5a7686a50b6cbd80f2b6ab11baced548ed629909da7b4a416f8950fa3e716b622715c04b8f10d1ad58b3def46bba4b98f5191e21e4d686a413891cb5d256a373b51c19994037ed4880506880e273e25be14f036ce0576a8a0f90b35ce4ae0c0166a83b351d0e88eae4e39d91516d601e1da28967af42351edd31c39ed6691c9ae11343a77cf05475a45bca0c261aca9428e35062eab91e5b5106ecc67c544032e52e2912758508d493f2a00e268eee12fa58566f39109a7dcd5b79cf78a401fa7815065f173d98aa18d23c848ed5d46b649c18219815849af71f4bd4d211903a120ef0472d3d137b6c4fbfba8c8feaf6fafb821ee4ed93e5c51c4f78ecf1b61c954c282c13438e3aa1e7b16a26e8728d32239b7219c37b043331ee5ac937da4723bd4789863be17eeb51525f8f6e4b1b3630045f38a84c0d2c0bfc306895a3c606463bf8158d8f2e9382299c9fba2a83c759ea22047e536780b6d8211a0245e801317a1c85c60b3a272192ad3dd3881d0f3d9c09282a3701090858bcb259338529d7db886932f7198767b645acbe281e11a241add5a38bf606ed7e2979a0b565e8660b61f96c3d29fc7054aa8a251f877a82609b58649b58b3b7fcacc87acafc37746dab2138be6eb76ddcaad6eb4d06d7715c0fcb233596ff2290651113b7bd16d16ea7a78b466c435d6a6c3a0e8a541ba0318b58a316393a39452d493fe532afc0edfdec7a9aa5b205c48b558a08d7d19ab13ce2f3d5ad0fe91d633614d1bd584f88ad971cf3797177fa07a868e3ff47d1f1efb81a478dcae5d0dbb949dcd24a39ab5326d29fc484deb592fd1518a86177d02004b63d8b8e4486c774510774fa4dfee59ec1ff461e2bd882ffff4b234a9a3b5497c0176ac3781bc11e9945af32df892b1a09c78fc4e80cb4770de2289e47f9b05effd71aa2a41d88ac4021dd3a2b3b81d5c2ec1c567f7e609d6bfc96b4fbc2ebc953e63ccabfdd49588626862fa5c77da9d15f804c51594e0a3888e8aec0ec1cfd66479b908afcb313e3863e1a2b18c9001fa8e9e2b93ec67febb7e09077344950b5e6a7733023d6c08a317f8234c2a7105177ba2bea376bac3752ef8af620271e76e858013bd54d3f577480ece7f9d86a8badee8f3c7d9c390a804659606120b32bb7fa88bd4cdc294893060e48191f1ccb95a3dd8aa05d6ba440c7cddc489030cac854e0d447a294b331bdf49993e36392f0ef633fbeadaff6de499885b018b909d622880c8691cada467ee09223b190793ef2cc15d7ab2f69b48bef372eb1d36606f39bb118655a1ac3f87eda301f4dde1e6aacdc30ad32c6d3e927145d4000393a6cd32ea09862e343fdd83f0858b1c49e0d5e5d5d1b1cd0a335b3cbbeefa7d0d25888a50e0ba74dcdb2c08a49454ff48fdef346c0a9613c0197d05bc8fe6c9c15bfc760e2a867254190469bd92db58defd327d7daae0bd001abf1e2d01b0babba3b6228970fe677338a63f891516fdcd5afc5edd6ac287c5e5c0238e7b4fba0129d111fa18ebff0c79717c80808ac0997fb57e32986daa39caeb63fc371b232f4cfdd12a7f98d50d6e098bbca251adb608a6ab56fad2cad9b0358b5c686d7494000d88092f4c271a4269921335735bc8357aa82043f0abed98e50d281dbdbd7f709e89cf190f50c3bfeb59a8a5594633a9bc24154158a62c335704efa44d58b69acbf2393b50e4a3bce372609ec01ff7f5898bbb1a087be169e9813839018d93f51857a2e7ba4628fd6154ce6d8e96f6097308569850989766c0aca4aa845170f228310cf6cf983194bc30bed9ec148a86c3f45c1701453cc069c098792819bcaba82f521233422562151c96079ec6b2c068cbb66a1487f5fe25b40059eb7a768762ac290fa9faeba78772b01e7d4a48a05464fe6117a77d1580e5c1168ce92a10b3b7bc9ea010c132ee378e6d3c329ed20ba147e5420e04061d6b8e2e8abf32371b63ff29f04912e77eb428e21127537cf4d462cdc0f42c80d96fa41e672eda71c14f75e2d77adc4d7c679f1ae97618bc48488ea6d3535c409cafe2acb105cc81b6019e3e8d8bc20b7cf04226dd7d66accec6dd133abdc93d453e74ec2f5e82207552f5d7c7ace3d0730bbc5241957dbfb775d255dd568ee6f1d33feba4ef062fc5858fab39fdd81e5364ad988866381abfeb3be0223cd7c4060105bedd7fbb58b9adfde346358519435a46249671fa92917e0003df3d76819ed10a9085aceb3a4ab9ac70def0622106ca495558337866bbceb7bf226a1368ac430196e73ea54516628f84d46cc0817f3e789c6f6be65c8e30619d5ca02b81501b393f27f7d655f49411454cb647aa45a780a42b581a2f95f9cdc1b1b62ed30b0d30789d1251248eeeed4dcccc6e9dfc5af02fdf00ae8feff3e7e38d1144c7b1789eba3e19c3158e72c827", 0x1000, 0x8}]) [ 261.990780][ T8936] Dev loop0: unable to read RDB block 8 [ 261.996807][ T8936] loop0: unable to read partition table [ 262.045928][ T8936] loop0: partition table beyond EOD, truncated [ 262.080670][ T4109] Dev loop0: unable to read RDB block 8 [ 262.086668][ T8936] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 07:05:27 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x8) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x20}, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000280)="d80f6dd7109319291a3b865b389fe4b19e4958abe7f665bd1f2c1c1aa518f1bde10c381c0489555395ea468b2df0c4457d3704a52f8e83e83fb783a9e9744438618ad4c0513c8b5463424da503b90d3ad4afcb92df227fde559e50877fdc88aedf651e13a5236f6f9e3fae1beb8966178a1e0b7f1b8f707c5c93c068015296eaeb12f970603ee731876efe7c2150e5db9d0417898da1945c7d58c54cf12f66c258d030af9f17bb1a3f906f1af17534f43dcdcada41fffed341df3c14887b9f217965", 0xc2}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x1a8, 0x29, 0x37, {0x3b, 0x31, [], [@calipso={0x7, 0x58, {0x0, 0x14, 0x9, 0x2, [0x6, 0xffff, 0x1ff, 0x6, 0x4, 0x100, 0x101, 0x8, 0x7f, 0x11]}}, @generic={0x2, 0xc8, "82fe9f03d331325e10fc0f6ca979830c1adc40ac269c2f837633f6f5b9fd8bee59f5d8f4719adc6ddf59b47e4a46a6bbf796e47e22ad57e694f797f8025e3680d8379f50f7fe60adaa458b75f535080270adc84c24bb5a7d7bf6b63e1e6dc3fac892c493e955ee7c51a5b4f074cae469e07ffdd0986fe039db74327c0a76159bdf705da94067ade87d59ea3d3e6294ab5eca32370f68a4eeeeae45698d0e9bceff6f08a5bec632a7c1228f682665cc40dd4b024e26a3c5cafeaf1c2787c08444ca41a4976fef475d"}, @generic={0x5, 0x55, "b7ec5afac209dc79f4558637d57988b6130419ee0cb31219a6996e6857e8ff8a13a5acfb31e69aca0a0470632d58641761d5fc084dfe2bb2bcf013d260adb0736ec99c1b39176d3ed459bad060ba3d526216903e3d"}, @jumbo={0xc2, 0x4, 0x28612800}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0xe5, 0x1, [], [@pad1, @pad1, @padn]}}}], 0x1e0}}], 0x1, 0x2004c040) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 07:05:27 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0xd0, 0x270, 0x270, 0x270, 0x270, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfc}}}, {{@ipv6={@loopback, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@empty}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) [ 262.099503][ T4109] loop0: unable to read partition table [ 262.120357][ T4109] loop0: partition table beyond EOD, truncated [ 262.238786][ T8947] overlayfs: invalid origin (0000007900742f6e65746c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 262.240301][ T8936] Dev loop0: unable to read RDB block 8 [ 262.261278][ T8936] loop0: unable to read partition table [ 262.267067][ T8936] loop0: partition table beyond EOD, truncated [ 262.275297][ T8936] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 262.286695][ T8885] QAT: Invalid ioctl [ 262.355633][ T8952] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 07:05:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x7, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000140)=0x3ff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)={0x3, 0x8, [0x6, 0xffffffff]}) 07:05:28 executing program 0: write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x8) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002280)={{{@in=@multicast2, @in6=@mcast2, 0x4e21, 0x72, 0x4e24, 0x2, 0xa, 0xa0, 0x20, 0x3b, 0x0, r1}, {0xc75, 0xeb3, 0x14f07d9, 0x0, 0x7, 0x100, 0x7, 0xf5a}, {0x4b7, 0x0, 0x80000000, 0x9}, 0x3, 0x6e6bbf, 0x1, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x3, 0x4d6, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3504, 0x3, 0x2, 0x3f, 0x6, 0xebc4, 0x8}}, 0xe8) fchdir(r0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ftruncate(r2, 0x1000) syz_open_procfs(0x0, 0x0) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000380)={[{0xffffc2a6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, {0x0, 0x0, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc7}, {0x0, 0x0, 0x9, 0x0, 0xb8, 0x0, 0x0, 0xb5, 0x7f, 0x0, 0x0, 0x0, 0x4}]}) openat$zero(0xffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x40080, 0x0) 07:05:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x6, 0x200000) sched_setattr(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400000000003}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='maps\x00') preadv(r1, 0x0, 0x0, 0x0) open(0x0, 0x200c2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000480), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x4, 0x0) [ 262.775984][ T27] audit: type=1804 audit(1585551928.273:10): pid=8968 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/17/file0/bus" dev="loop0" ino=23 res=1 07:05:28 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:05:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x7, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000140)=0x3ff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000100)={0x3, 0x8, [0x6, 0xffffffff]}) [ 262.854388][ T27] audit: type=1800 audit(1585551928.313:11): pid=8968 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=23 res=0 07:05:28 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x7, 0x22}) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 263.016138][ T8974] vivid-008: ================= START STATUS ================= [ 263.030172][ T8976] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 263.039240][ T8974] v4l2-ctrls: vivid-008: Test Pattern: 75% Colorbar [ 263.047050][ T8974] v4l2-ctrls: vivid-008: Fill Percentage of Frame: 100 [ 263.056807][ T8974] v4l2-ctrls: vivid-008: Horizontal Movement: No Movement [ 263.064643][ T8974] v4l2-ctrls: vivid-008: Vertical Movement: No Movement [ 263.072769][ T8974] v4l2-ctrls: vivid-008: OSD Text Mode: All [ 263.079185][ T8974] v4l2-ctrls: vivid-008: Show Border: false [ 263.091264][ T8974] v4l2-ctrls: vivid-008: Show Square: false [ 263.097854][ T8974] v4l2-ctrls: vivid-008: Sensor Flipped Horizontally: false [ 263.105832][ T8974] v4l2-ctrls: vivid-008: Sensor Flipped Vertically: false [ 263.124510][ T8974] v4l2-ctrls: vivid-008: Insert SAV Code in Image: false [ 263.141615][ T8974] v4l2-ctrls: vivid-008: Insert EAV Code in Image: false [ 263.151546][ T8974] v4l2-ctrls: vivid-008: Reduced Framerate: false [ 263.158701][ T8974] v4l2-ctrls: vivid-008: Enable Capture Cropping: true [ 263.168751][ T8974] v4l2-ctrls: vivid-008: Enable Capture Composing: true [ 263.176809][ T8974] v4l2-ctrls: vivid-008: Enable Capture Scaler: true [ 263.184445][ T8974] v4l2-ctrls: vivid-008: Timestamp Source: End of Frame [ 263.192228][ T8974] v4l2-ctrls: vivid-008: Colorspace: sRGB [ 263.198711][ T8974] v4l2-ctrls: vivid-008: Transfer Function: Default [ 263.206307][ T8974] v4l2-ctrls: vivid-008: Y'CbCr Encoding: Default [ 263.213824][ T8974] v4l2-ctrls: vivid-008: HSV Encoding: Hue 0-179 [ 263.220789][ T8974] v4l2-ctrls: vivid-008: Quantization: Default [ 263.227434][ T8974] v4l2-ctrls: vivid-008: Apply Alpha To Red Only: false [ 263.235362][ T8974] v4l2-ctrls: vivid-008: Standard Aspect Ratio: 4x3 [ 263.242552][ T8974] v4l2-ctrls: vivid-008: DV Timings Signal Mode: Current DV Timings inactive [ 263.252707][ T8974] v4l2-ctrls: vivid-008: DV Timings: 640x480p59 inactive [ 263.260470][ T8974] v4l2-ctrls: vivid-008: DV Timings Aspect Ratio: Source Width x Height [ 263.269380][ T8974] v4l2-ctrls: vivid-008: Maximum EDID Blocks: 2 [ 263.278673][ T8974] v4l2-ctrls: vivid-008: Limited RGB Range (16-235): false [ 263.286664][ T8974] v4l2-ctrls: vivid-008: Rx RGB Quantization Range: Automatic [ 263.294870][ T8974] v4l2-ctrls: vivid-008: Power Present: 0x00000001 [ 263.305959][ T8974] tpg source WxH: 640x360 (Y'CbCr) [ 263.311641][ T8974] tpg field: 1 [ 263.315491][ T8974] tpg crop: 640x360@0x0 [ 263.320226][ T8974] tpg compose: 640x360@0x0 [ 263.325097][ T8974] tpg colorspace: 8 [ 263.328369][ T27] audit: type=1804 audit(1585551928.823:12): pid=8984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir928203906/syzkaller.OTg5OF/17/file0/bus" dev="loop0" ino=23 res=1 [ 263.329250][ T8974] tpg transfer function: 0/0 [ 263.358242][ T8974] tpg Y'CbCr encoding: 0/0 [ 263.363188][ T8974] tpg quantization: 0/0 07:05:28 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x7, 0x22}) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 263.377848][ T8974] tpg RGB range: 0/2 [ 263.384006][ T8974] vivid-008: ================== END STATUS ================== 07:05:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x101, 0x6], 0x3, 0x7ff, 0x5, 0x0, 0x4, 0x7, 0x5, {0x5, 0xb31, 0xff, 0x9466, 0xffff, 0x2, 0x737, 0xfff, 0x0, 0xfffe, 0x3, 0x5, 0x20, 0x0, "a1cccb6b9fa75eb1f42290f0435ae372264391e6d06a95405a36838faef87947"}}) [ 263.440344][ T8988] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 263.471708][ T27] audit: type=1800 audit(1585551928.823:13): pid=8984 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=23 res=0 07:05:29 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)='1', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@local}) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x7, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x300, 0x43, 0x0) 07:05:29 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x7, 0x22}) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 263.631591][ T8998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:05:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x2411, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) tkill(0x0, 0x3c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ptrace$cont(0x20, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='+]&\x00', 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, r0, 0x0, 0x0, r3) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) [ 263.697793][ T9001] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="25330000000000002c0012800900010efeba906e000000001c0002800600010000000000040003800c0002001f0000001300000008000500", @ANYRES16=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x7}}, 0x0) 07:05:29 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x7, 0x22}) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 263.980994][ T9012] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:29 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 264.219235][ T9008] FAT-fs (loop0): Directory bread(block 1) failed [ 264.257649][ T9024] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/38, 0x26) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6dd7, @ipv4={[], [], @remote}, 0x800}], 0x1c) [ 264.259275][ T9008] FAT-fs (loop0): Directory bread(block 2) failed [ 264.277326][ T8972] QAT: Invalid ioctl [ 264.329200][ T9008] FAT-fs (loop0): Directory bread(block 3) failed [ 264.371242][ T9008] FAT-fs (loop0): Directory bread(block 4) failed [ 264.408351][ T9008] FAT-fs (loop0): Directory bread(block 5) failed [ 264.433202][ T9008] FAT-fs (loop0): Directory bread(block 6) failed [ 264.458671][ T9008] FAT-fs (loop0): Directory bread(block 7) failed [ 264.492588][ T9008] FAT-fs (loop0): Directory bread(block 8) failed [ 264.518038][ T9008] FAT-fs (loop0): Directory bread(block 9) failed [ 264.545247][ T9008] FAT-fs (loop0): Directory bread(block 10) failed 07:05:31 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:05:31 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:31 executing program 0: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f0000000040)={0x2, 0x73, 0x12, 0x2, 0x0, 0x0, 0x0, 0x10000000000, 0xc4600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000400), 0xc}, 0x0, 0xffffffffffffffff}, r0, 0xb, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x128, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'tunl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x20) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x1, {0xf, 0x27, 0xb, 0xa, 0x3, 0x400, 0x3, 0x1b, 0x1}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x400007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) 07:05:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/38, 0x26) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6dd7, @ipv4={[], [], @remote}, 0x800}], 0x1c) [ 266.044778][ T9048] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:31 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) pipe(&(0x7f0000000000)) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 266.237397][ T9049] QAT: Invalid ioctl 07:05:31 executing program 2: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/timer\x00', 0x440400) syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:32 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/38, 0x26) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6dd7, @ipv4={[], [], @remote}, 0x800}], 0x1c) 07:05:32 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/38, 0x26) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6dd7, @ipv4={[], [], @remote}, 0x800}], 0x1c) 07:05:32 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x300cce, &(0x7f0000000080)={@local, @empty, @val={@val={0x8100}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x2, 0x0, 0x0, @rand_addr, @rand_addr="ffffff8900"}}}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0)=0x10000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r4, 0x0, "9681b8", "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"}}, 0x110) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000240)={0xffffffffffffffff}, 0x1, r4, 0x1c, 0x0, @in={0x2, 0x4e24, @rand_addr=0x4fd}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r5}}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000000c0)={0x1, 0x4, 0x2, 0x401, 0x3, "631eee4e27906431"}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) 07:05:33 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 07:05:33 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x280000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @rand_addr=0x9}}, 0x0, 0x7ff, 0xff, 0xbd, 0xb, 0x20, 0x63}, 0x9c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) flock(r3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) 07:05:33 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e007b80e663ac24f6e8d1b8b77b9c5791513a49a976883313c786e60364c3a831df11acf18f6ddfc3c32729c6c1f824e1a4470b12985e7a5ca37d233899adf14747070b3d644ee92c0c95656bd0abeb76c8f02fde"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000000)) r5 = open(&(0x7f0000002000)='./bus\x00', 0x220402, 0x1b5) sendfile(r5, r0, 0x0, 0x209) 07:05:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$describe(0x6, r2, &(0x7f0000000100)=""/38, 0x26) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x6dd7, @ipv4={[], [], @remote}, 0x800}], 0x1c) 07:05:33 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x0, @dev}, 0x0, {}, 'batadv_slave_1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = socket$inet6(0xa, 0x3, 0x20000000021) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000180), &(0x7f0000000300)=0x4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCXONC(r6, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xfffffbff, 0x4) ioctl$VT_DISALLOCATE(r3, 0x5608) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f0000000340)={0xd, 0x20}) sendto$inet6(r4, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 07:05:33 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x7, 0x70, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780)='/dev/zero\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x11) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r3 = open(0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x1ff, @bearer=@l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 07:05:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x280000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @rand_addr=0x9}}, 0x0, 0x7ff, 0xff, 0xbd, 0xb, 0x20, 0x63}, 0x9c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) flock(r3, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) [ 268.404675][ T9129] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 268.471191][ T9129] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 268.534014][ T9129] syz-executor.0 (9129) used greatest stack depth: 22720 bytes left 07:05:34 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x133c}, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x6) ftruncate(r1, 0x1000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x101000, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6e, 0xf4621bb9816377f9) r2 = socket$inet(0x2, 0x800, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000140)={0x1, 0x7, [@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={[], 0x2f}, @remote, @broadcast, @local, @broadcast]}) socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000080)={0x7, 0x3, 0x2, 0x6, 0x3ff}) 07:05:34 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 268.844373][ T9118] QAT: Invalid ioctl 07:05:35 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 07:05:35 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:05:35 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="a001000010007d07a0eeb8bc5fcaf42e1bb08644420c76fa0000000000000000fe88000000364f000000c50000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0) 07:05:35 executing program 0: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x2020}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = dup3(r4, r1, 0x80000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000100)) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2, 0x7ff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r7 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x4a200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r6, 0x0, 0x20000000000000d8) socket$netlink(0x10, 0x3, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x3) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f00000000c0)='./file0\x00') [ 269.952435][ T9181] __ntfs_error: 3 callbacks suppressed [ 269.952445][ T9181] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 07:05:35 executing program 5: keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x6, 0x70, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3035bc42bdc2f43b, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x46000, 0x8001, 0x8001, 0x4, 0x400, 0x1ff, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x1) getgid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000300)) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r4 = syz_open_dev$cec(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000140)={0xa30000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c090a, 0x0, [], @value=0x9}}) statx(r0, 0x0, 0x0, 0x400, 0x0) [ 270.281869][ T9190] overlayfs: filesystem on './file0' not supported as upperdir 07:05:36 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0xfffffc61) inotify_init1(0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000540)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x0, @dev}, 0x0, {}, 'batadv_slave_1\x00'}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = dup(r2) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = socket$inet6(0xa, 0x3, 0x20000000021) r5 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$X25_QBITINCL(r5, 0x106, 0x1, &(0x7f0000000180), &(0x7f0000000300)=0x4) r6 = dup(0xffffffffffffffff) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCXONC(r6, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000200)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xfffffbff, 0x4) ioctl$VT_DISALLOCATE(r3, 0x5608) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f0000000340)={0xd, 0x20}) sendto$inet6(r4, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) 07:05:36 executing program 5: keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x6, 0x70, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3035bc42bdc2f43b, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x46000, 0x8001, 0x8001, 0x4, 0x400, 0x1ff, 0x6}, r2, 0x6, 0xffffffffffffffff, 0x1) getgid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000300)) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r4 = syz_open_dev$cec(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000140)={0xa30000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c090a, 0x0, [], @value=0x9}}) statx(r0, 0x0, 0x0, 0x400, 0x0) 07:05:36 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:05:36 executing program 0: r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x2020}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = dup3(r4, r1, 0x80000) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000100)) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x2, 0x7ff}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r7 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x0, 0x4a200) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r6, 0x0, 0x20000000000000d8) socket$netlink(0x10, 0x3, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x3) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r9, &(0x7f00000000c0)='./file0\x00') [ 271.159939][ T9204] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 07:05:36 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:05:37 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) [ 271.434626][ T9214] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 07:05:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4a, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="00f579ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 271.504782][ T9175] QAT: Invalid ioctl [ 271.572594][ T9220] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:37 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) 07:05:37 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x9, 0x488c2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x28, &(0x7f0000000540)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r1}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1, 0x8, 0x8}, 0xc) syz_open_pts(r0, 0x240001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="80c20000b1e28e009506cc333950db69e646714e2861052215e14e7a506ad3951a9aa65a0aa046bc0e3de2cff6"], 0x28}}, 0x0) 07:05:37 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 07:05:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x8e, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000000c0)="345c276c03caf2a9d5f458c993b67aeaa62dad7c8b869add8fe48f403a7fa0cbbdb3dceaa2dacb083437543908544a9e0ad3b4dfa85ee9db9ec3f777f02a714e7df0dd7d9a8bdc2f27fe8dc1bfeb5e4352acc77474873f972da337", 0x5b, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x57, &(0x7f0000000380)=""/87}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000346fc8)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) [ 271.959768][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.969891][ T9239] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:37 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}]}) [ 272.151242][ T9250] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 272.244254][ T9243] QAT: Invalid ioctl 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x7, &(0x7f0000000080)={0x3, 0x6a}) fcntl$lock(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) ioctl$CAPI_INSTALLED(r2, 0x80024322) 07:05:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0x0, 0x10fffe) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x3f000000, r1, 0x0, 0x0, 0xf010000}) 07:05:38 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@errors_recover='errors=recover'}]}) 07:05:38 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000100)={0x1, 0xfffffffd, {r1}, {r2}, 0x6, 0x200}) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 07:05:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xe50, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe3c, 0x1, [@m_pedit={0xe38, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xc}}}]}, {0x4}}}]}]}, 0xe50}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01000000e330e2def4c059d370f80f5702ed6d657464657692696dedb4a2540000000008000000000000000000009b4fcb851868d19f902fd4207e88a2dc45cffe22dc7dd6ea3f040bc43d297f2d76fbc9d432e5fac342888e0db026fc"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60928c9433eca3c3490c5d47c23330", @ANYRES16=r4, @ANYBLOB="00032cbd7000fedbdf2505000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x60}}, 0x4000000) 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 272.710072][ T9274] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:38 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@errors_recover='errors=recover'}]}) 07:05:38 executing program 5: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast1, 0x52}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/73, 0x3f4fd7a220e5df02}], 0x0, 0x0, 0x15d, 0x0) tkill(r0, 0xe) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000001c0)={0x3, 0x5}) ptrace$cont(0x9, r0, 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xffdbc494) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 07:05:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000180)={0x50000, 0x4}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20050024) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xfffffffc}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0x5}, r5}}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f00000004c0)={0xa, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xca, &(0x7f0000000100)={{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x2, @mcast1}, 0x0, [0x0, 0xffff, 0x10, 0x2, 0x2000]}, 0x5c) 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 272.936311][ T27] audit: type=1800 audit(1585551938.433:14): pid=9282 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=15794 res=0 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x3800) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)="a8e06e690800000000000000a5bfed7b2fac6200c388301ca80dc061dfd3ea5ddd8f5302271f9d192a6903", 0x2b}, {&(0x7f0000000840)="5999d81f417be991695c1a4f5059f726ebe2a5fca73c4067c797e9ad4b5384ea693a926d2d569a28e06cd628dc09f252d947d583c72754825ac3d5e12bdfe2ddf2b592a884e653ef6f2c0e3582c09443a44f5ccba1418263182eea2d303fe2446256b1d4be7400000000620fe775476a1c03371007c486dd890aad01195da821", 0x80}, {&(0x7f0000000900)="bf0d505d81d5e16992455b5fa6b5c2763c1bece0ab8a802b993e0041d8269ecb890e6dfe00bce9a85ac71baa0200d763b443ff65c1aa50ac7f247a2c697732eb9cedbc561e27db87f327ce4a96c694c573f378fe4c73b620eb220be82957261aca91cb594fa01683bf6d3c5597762728ca917d0c38cc21e1bf5e73ecc3e75074620404c945d595d451df4de213c0a3f26491e0990788cc5d4dda6cb963f6a171cf9a3925f2cd97db05d78b74ae87716d797bd73bc5afd8f33b73c52dbe56badfd2cbc4e8ea6f0f3400", 0xc9}], 0x3, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000003) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000100)=0x72, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @null, @netrom={'nr', 0x0}, 0x5, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@null) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x1, @dev, 0x5}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffe) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0xd8, @local, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="6366bb7f4fe145ef89cd5cc2427826426eac71d2088d5a4b3d98841a0f93ee527b6ee719a173e48255b6dab793d4bdae7e3b119fd3ba6163871e95cf5762e2b86d64470cad3809f21fc47e867f2cf373e22ef1a18243f3ea8b465242f6a1365200b836979c392fc86b416613f6b6d6f39076a48ce2d4da4d3a7f767d81937fac6a5721e6e4b7aab316e5e3958760ea9efd8fe28842f787b8684b04eb14c8a452c2939d1826cac1cdb51447996d2679bd9f37651644b88960", 0xb8}, {0x0}, {&(0x7f0000000180)="b35e76ec12eec47e7f20d801d38ae772b20524d5fbb4e5a84700846a", 0x1c}, {&(0x7f0000000500)="1b471644e57369666605f1c774128c45562f3df1c7398d32439a0a9fd59a6219f2b1dcff9bc980a5f6231a5c79aff194911931eaaaf5445d4212cd6bbb9a9ea5ce0af4dd0b3ee8bbf79a6187d83331d859c905f9886ecdb3370ec2206b3123a9c9f064996d02414c107f316391ae75810d206d433422f64e1436ee5f397d93bfb7c1c7167660be20c4585af215d15a6b0e1002b630b4820cb014967800fcbe897da12207647bbc", 0xa7}], 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000008000800545000000800409bea0000ec03121094e250cca0fe"], 0x1f, 0x4008084}, 0x0) [ 273.000069][ T9300] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:38 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@errors_recover='errors=recover'}]}) 07:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 273.291581][ T9319] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 273.480119][ T9273] QAT: Invalid ioctl 07:05:39 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semop(r4, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r4, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r4, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, r2, 0x0, 0xa4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 07:05:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80000001, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b503000000000001000004"], 0x3}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r4, 0x2, 0x2, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) 07:05:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:39 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:39 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)=ANY=[], 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1012, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$ppp(r1, &(0x7f0000000040)="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", 0xfb) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000340)=0x0) io_getevents(r4, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)='sy\x04\x00emmim\x00tyteM\x1eC<\x00%\x00\x87f\"bb\xe1\xbe\xbb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x81\xff\xff]\x8cQ[*\xac\xf8\xff\xff\x00\x00\x00\x00\x00\xf3<\\\xeb\xd7\x82Dm\xb2\xbeH \x7f\tz\xc5\x03\xa1\x7f\xe7\xde\x1a\x84t\xd6g\xa7UP\x9a\x05\x9bo\x16X\x8c}\x00r>$X_X\xa6\xd9\xa1\xee\xfc(;\xd2j\'\x03\x040\x85\xa0{U\xb3\xaf\xeby\xcb\xfd\xdat\xc3}d$l8I\"-\xbd#kk\x1b\xd9\x9d\x1b\xd1\xa9\xf3\xabh\xfc\xa6\xaauX\x15#\xb2i\xb9\x97\x87\xb5k7\x85\x1e?\x8c\xf2xt\x8b\xd8b\x87\xf8\xe8\xb9\x14\n\x1br\x87xU \xcc\x01\f,\xf3\xbb)\x89\xa5.\xee#a\x88\xc9\a\xa0C\xbet\xafk\xe7\xb2\xfdm\r\x83\x916O\x1d\xa7co`\xe3\xe5p\x06\x00\x00\x00h\x7ffo\xf9\xdba/\xf3\x1a%g\xf9\a@\xd3\rS\r\xa0\\\x1a\xfd\x8e!\xdd\x01S\xc8X\x9b\xdeD\xebF\xf4\xc8\x892\x871\x13v\xe1\x87\x7fU\xc7\xde\xf6\xdfL\n', 0x0) io_submit(r4, 0x2, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x0, r5, 0x0}, 0x0]) io_destroy(r4) creat(&(0x7f0000000680)='./bus\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) ftruncate(r7, 0x200000800) dup2(r2, r3) 07:05:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:39 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001780)='/dev/uhid\x00', 0x2, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x119) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) dup2(r3, r4) 07:05:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:40 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:40 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r0, 0x208200) mount$overlay(0x400000, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c6c6f7765726469723d2e3a666530000079a7627c3d47a19e3192d222bd94637046b04eb3f13cbfa3"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x6, 0x1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="3cf5603c67a639c6753c601ef1472d9bbbd3d04c0cfc9b11e6fe554362f48a5a2836c211faef6e4cb51c599bd3c2ca412463a2bb0ffb72e40b0a847ea4f43d95efd4f400663f1866813ac5a5acab0690fb61774113d36fe7e3bb32032e5747f683b7cae19e9b53b2a2f041a18c796d1c98b14e5f0aba9774bd454405e5f44511c40c9cdc79eacb09b6492957c672c9f93a664a4c6d0f17f8fcbd0781502c5f117b798c5d6a88bb2c8499916cdff43ee8c83711117fc8d93337f363f4cbc772115e71e97c96a67c512a", 0xc9, 0x9}], 0x88, &(0x7f0000000500)={[{@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}], [{@subj_user={'subj_user', 0x3d, '/dev/dmmidi#\x00'}}, {@context={'context', 0x3d, 'root'}}, {@euid_lt={'euid<', r2}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x6e, 0x62, 0x38, 0x34, 0x62, 0x30], 0x2d, [0x34, 0x65, 0x32, 0x38], 0x2d, [0x36, 0x34, 0x36, 0x39], 0x2d, [0x34, 0x34, 0x62, 0x39], 0x2d, [0x65, 0x39, 0x31, 0x65, 0x31, 0x64, 0x34, 0x62]}}}]}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000140)='./bus\x00', 0x101000, 0xc000) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='overlay\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f6275692c6673636f6e746578003d73797374656d5f752c6d184961325355356d455845432c00"]) syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x1, 0x331480) 07:05:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 275.497892][ T9392] __ntfs_error: 9 callbacks suppressed [ 275.497903][ T9392] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 07:05:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 07:05:41 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000140)={0x7b}) dup(0xffffffffffffffff) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 275.645070][ T9402] FAT-fs (loop0): Unrecognized mount option "subj_user=/dev/dmmidi#" or missing value 07:05:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x3, 0x0, "d3853a82102dd254baff2a3f28821daca102d264862b1cdcef2f40492c028c46"}) r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xd98d}, 0xf) dup(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0xc) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_AF_SPEC={0x42, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x20008040) 07:05:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 275.794814][ T9418] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 275.981934][ T9435] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 276.140154][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000014 data 0xcf [ 276.155923][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000001d data 0xdf [ 276.167414][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000004f data 0x51 [ 276.183729][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000005d data 0x91 [ 276.193936][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000008d data 0xf [ 276.209840][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000004c data 0xd1 [ 276.225196][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000005a data 0x91 [ 276.237971][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x4000008a data 0xf [ 276.255264][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000049 data 0xd1 [ 276.289747][ T9421] kvm [9420]: vcpu0, guest rIP: 0x48 Hyper-V unhandled wrmsr: 0x40000057 data 0x91 07:05:43 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:43 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0xffffffff) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4cccc0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$radio(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x202500, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) inotify_init1(0x0) poll(0x0, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x801, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4cb, 0xefe, 0x0, 0x0, 0x200], 0x0, 0x44000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:05:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 277.781706][ T9453] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:43 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400, 0x8}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0xa2e4, 0x3, 0x4, 0x0, 0x84}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x7, 0x8, 0xff, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x40000, 0xffffff63, 0x1, 0x9, 0x80000001, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x20, 0x3, 0x8, 0x2, 0x0, 0x6, 0x20000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10202, 0x9329, 0x2, 0x5, 0x4, 0x7, 0x10c4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 07:05:44 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400, 0x8}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0xa2e4, 0x3, 0x4, 0x0, 0x84}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x7, 0x8, 0xff, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x40000, 0xffffff63, 0x1, 0x9, 0x80000001, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x20, 0x3, 0x8, 0x2, 0x0, 0x6, 0x20000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10202, 0x9329, 0x2, 0x5, 0x4, 0x7, 0x10c4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 07:05:44 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:44 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 279.069458][ T9490] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:44 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400, 0x8}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0xa2e4, 0x3, 0x4, 0x0, 0x84}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x7, 0x8, 0xff, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x40000, 0xffffff63, 0x1, 0x9, 0x80000001, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x20, 0x3, 0x8, 0x2, 0x0, 0x6, 0x20000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10202, 0x9329, 0x2, 0x5, 0x4, 0x7, 0x10c4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 07:05:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:45 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:45 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:45 executing program 5: sendmsg(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400, 0x8}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x0, 0xa2e4, 0x3, 0x4, 0x0, 0x84}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x7, 0x8, 0xff, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x40000, 0xffffff63, 0x1, 0x9, 0x80000001, 0x8000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x20, 0x3, 0x8, 0x2, 0x0, 0x6, 0x20000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xc}, 0x10202, 0x9329, 0x2, 0x5, 0x4, 0x7, 0x10c4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 07:05:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:45 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r6, 0x740c6356c7505b00, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}}, 0x20000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x110000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r0, r7, 0x0, 0x88000fc000000) 07:05:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 280.395410][ T9515] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:46 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:46 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 280.547990][ T27] audit: type=1800 audit(1585551946.044:22): pid=9513 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=15965 res=0 07:05:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 280.742708][ T9533] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:47 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:47 executing program 1: keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getgid() socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080001006e166ca58b8ec1f2cec0d3c03da000c76672f4239ef34f9977fa0c25fdc6c33c8fbe61aa00fd641dcf19ccb1a157139268729bead94774b14bb3371acce606f1b23c362daf63dd428d400596bf7284137734b184945db19e010406db42785705db48515026b086ef79bf1f57d55ecd", @ANYRES32=r0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0x34, 0x3) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f88dd6d23302c776f726b6469723d2e2f66696c65315c00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9c090a}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x7ff, 0x0) 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) pipe(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5, 0x1019c2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61a0734c5174000000000400000000000000000000001ed78541973d3ff72bc1ecf4637ffb00000000000000000000000000500000ec6dc3f87b6f33a39fcb0c9516f1ec8a2b348e2d3352efa4f878035c3ce3c68b8fa3613fc9372ef760648dbe1b2308ffbe67dbb2cc2c50269850317ecf166a4c05e0adf9c9f91e1f6f00000000"], &(0x7f0000000180)=0x74) r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000000c0)="1f", 0x1, r1) keyctl$describe(0x6, r1, &(0x7f0000000380)=""/178, 0xb2) socket(0x1000000010, 0x80002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={r2, 0x1, 0x6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x0) sendto$inet(r5, 0x0, 0xffffffffa0020000, 0x0, 0x0, 0xb2) [ 281.637435][ T9557] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:47 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4c4340, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2, 0x3}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000180)=0x6, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80100, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1009c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 281.943392][ T9565] overlayfs: failed to resolve './ˆÝm#0': -2 [ 281.975608][ T9584] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 282.015599][ T9570] overlayfs: workdir and upperdir must reside under the same mount 07:05:48 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r2, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r2, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:48 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7372, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 282.689322][ T9619] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000000)={0x3, [0xd1c, 0x5, 0xad]}) 07:05:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:48 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='bdev!)-%+wlan0posix_acl_access}\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r0, 0x0, 0x7ffffffe, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) poll(&(0x7f0000000080)=[{r3, 0x220}, {0xffffffffffffffff, 0x80}], 0x2, 0x10000) r6 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xfffffffffffffff7, 0x11000) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000200)=0x200) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x81}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) [ 283.125618][ T9635] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 283.156656][ T9647] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:49 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r2, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r2, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:49 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000004380)={0x0, 0x34, 0x9, 0x4, 0x7fff, 0x20, 0x400, 0x4f, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x2}}, 0x9, 0x20, 0x0, 0x0, 0xf28}}, &(0x7f0000001240)=0xb0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000640)={0x8, 0x4, [0x7]}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000800)=""/116, &(0x7f0000000880)=0x74) lseek(0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 07:05:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x88}, 0x88}}, 0x0) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfeac) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x20000000010002, 0x0) 07:05:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 283.633938][ T9667] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:49 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x140a, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0xa078742fa27e6ece) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000200)=0x1ff, 0x4) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@quota_quantum={'quota_quantum'}}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000240)=""/82, &(0x7f00000002c0)=0x52) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 07:05:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 283.839734][ T9680] gfs2: quota_quantum mount option requires a positive numeric argument 07:05:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}}, 0x14}}, 0x0) [ 283.944048][ T9693] gfs2: quota_quantum mount option requires a positive numeric argument [ 283.944057][ T9689] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:49 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="5800000030003dfb00000000000000000000000044000100400001000f00010074756e6e656c5f6b657900002800028008000a00ac1e00011c00000000000000000000050000000000003c687d6400000004000600"], 0x58}}, 0x0) 07:05:50 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) socket$nl_generic(0x10, 0x3, 0x10) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r2, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r2, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:50 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r6, 0x2}, 0xc) 07:05:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000380)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x8, "85dab7a5aeac600f1af12ed95d788096d2aa89f7288039d239d000d236b701adadc43e16a4b66ef2dfaf55c3d89e88eb2d9d19244670b162ba836322a4ad107830bca465629bad211a4c9043800a21ea37d6582a43a4ce5079714105e3149fff652a8b39da82badc461a5f2ef4b5de2856451a5b60e9111e35b53d2eef8153406451d5f26232ce5f4578a9705063b4e9df3dbbf8c012a4c167e496e7f314e534a6e9a8a33b7e36aea434e0b0bcc18f5eb7a849ca719fc1863b90bef5aefd93bc970d2e946362c0d59f34b9446cabbd368d024aee630bd32f6d03e35b99dddeb1164ca8f018c1f1909c1e31a3b6f2457c0144234eeb05e96a3a00da073190bfc6", 0xfc, 0x0, 0x7f, 0x0, 0x7f, 0x8, 0x9, 0x1}, r4}}, 0x128) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xa2, 0x3, 0x0, 0x1, 0x3, 0x61168e82, 0x5002, 0x100000, 0x9, 0x81, 0x3, 0x7, 0x1, 0x2, 0x1c, 0x20, {0xffff, 0x7fffffff}, 0x0, 0x6}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000300)=[{&(0x7f0000000880)="eac9bf571c7fe55a04915acbb3388d34c6ed47c921058f9e40c46a57156abf049f1efaa56af97e5bb2f850e959fa4143eca17e5a70538e11e331d1e50ba76bc8663e18953eeb", 0x46, 0x731fb52d}, {&(0x7f0000000900)="e86d90fcfa7694b461857f9acc830d41189026071ab1f4ce258e3c66924a8fdc0d6a6f0e3e5064f41341a21dc6234788cbbb7129cfafea139646dc55b8a1489a59f9918c0599ab29900d2461430d2621e839ae1f0ffb6cd372d8b57771bd776469003c0a085a43244823592c2e57fba0b3a23d4eb809c48edee789d3fd59d93f17cebf775ef16b8b64c655bdb47487c78a28435162b4135048502cdfa080a2980f89104c1fc6ac49aeecc8970bf0f039db3493e262cdac61727c03ac773ce6fed532ce4198ac8fd319fd3a903e9daff8617e7f1c423ce801db92101487abd0d397ed5219dfbb480ab0b2b7b59cdec8633de886", 0xf3, 0x6}], 0x2, &(0x7f0000000a00)={[{@data_writeback='data=writeback'}, {@hash_r5='hash=r5'}, {@balloc_border='block-allocator=border'}], [{@subj_type={'subj_type', 0x3d, ',md5sum'}}, {@euid_eq={'euid', 0x3d, r6}}, {@hash='hash'}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '@$cgroup{self'}}, {@subj_role={'subj_role', 0x3d, 'wlan1'}}]}) 07:05:50 executing program 1: socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/246, 0xf6}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000180)={0xa, 0x32315559, 0x7ffffffe, 0xb29, 0x2, @discrete={0x14902520, 0xffffffff}}) sendfile(r1, r2, 0x0, 0x100000080000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f00000001c0)=""/168) [ 284.701223][ T9728] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 284.728552][ T9740] input: syz1 as /devices/virtual/input/input5 07:05:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x40}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0xaf11745f0092dc01}, 0x1, 0x0, 0x0, 0xc10}, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000240)=""/97) [ 284.947455][ T9740] input: syz1 as /devices/virtual/input/input6 07:05:50 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) 07:05:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xfff8, 0xffffffffffffffff, &(0x7f0000000200)="f57720064c5765cf47b72c0b25decb561257c4e4848a86616909d8d52f0245e73e75d118d5c87e7fa85fba13fc2f5edaaffa31d9d393b99079767475fd6d46a6fd232f9c0d23ebc807ea43c4ff66add10b4d5b0963f5416cfed8924bc7f63796f6b6b3f8f52e9e69ff560097f31c09fc859bb0b704636d2398928254ab03c7a5bc4da836c7295829dfac4a9faf0855c5071eaeb4a4552effa739f736c7eeb60cf6e8dd6a89836361393a417aa592dce49eecacf0bb0466768715e8ba468e8bb7682e5ddfb36aae352dc05a6452abbf78f39101c51da3c3ce75a31bce37c4ece7c04b2c40991c866a7ea1d965e4ce1e83c77cf4ac4588632169e5", 0xfa, 0x7, 0x0, 0x0, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000340)="1cfa3eaa716f3f9c05ca926d2bbb3056a5d1f8eb0a3b42d8acbf6eb39678fe4c5aaf3259935ca049eb61d0c29e218383a87b8c1af7d6848c8682d2f49bf4130b86cdfd84cd0ef49b355d7222db3ce47d01f642a87172c4068ea62b8e1ed2180f349c517f73424932b4479813b3f66b285c", 0x71, 0x0, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xad, 0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x8000}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0xffffffffffffffff, &(0x7f00000004c0)="37af925908330feafad49f3cb1140c8c90cf19f43c5d61bf1a9e4965686338d596646adba1159423f24020beec7fd4d1ff8a9055c5481748a394e8fe86a9b03a1236091b3ba21713ad376f396fe6d4c6d6f14573688597a97e0eb00d1ba2b9fd4f546ae8852c8982047fa92e628c572a75ee3f4e9998c27c152be83afbcd0cf6a2c6b05a6e6fc21bbf074c82ebd6d84ec3c89e57769a529c0cb9fde0ccb8001203dadafc64d7c343463a0a2adb743c0a805b509f6fcba95c9eb964a41f22ac5f0ebb0f12e502d006b10bb8bb4971e65d4a60db965d739e5cbdf1ebdaa8cffd71", 0xe0, 0x4, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000600)="fcf5cccd8e6a1d5a3c6e43bf4977703fd3f10f631b2041f7bccdf7a9c0f947a49e0bc0476eed1207", 0x28, 0x1, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xe, 0x8, 0xffffffffffffffff, &(0x7f0000000680)="33799072ab3a7a05c531", 0xa, 0xb93c, 0x0, 0x3, r0}]) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000180)=0x20) ioctl$RTC_WIE_OFF(r1, 0x7010) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x3, @broadcast}}, 0x0, 0x0, 0x2c1, 0x200000, 0x52, 0x6}, 0x9c) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000000400)="f86dd1418778", 0x6, 0x4062, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$binfmt_aout(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="119f67da3268ef0270ec94f9160ad2d9086c98a6f131cf6b5f8b2df08bc58c6ce2"], 0x1) 07:05:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000000c0)={0x1c, r3, 0x20f, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x5, r5}]}, 0x1c}}, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) r6 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x5, 0x4c200) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fchmod(r0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) r7 = socket$inet(0x2, 0x4000000805, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x6, 0x0, 0x0) r9 = dup2(r7, r8) execveat(r9, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='ppp1cgroup\x00', &(0x7f0000000300)='\x00'], &(0x7f0000000400)=[&(0x7f00000003c0)='eth0\nbdevproccgroup\x00'], 0x1000) [ 285.201958][ T9766] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:51 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x0, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:51 executing program 0: mkdir(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r0, 0x6) mount$9p_tcp(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x50004, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@afid={'afid', 0x3d, 0x2e8d}}, {@access_any='access=any'}], [{@dont_measure='dont_measure'}, {@fowner_eq={'fowner'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@hash='hash'}]}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="34b4714ffaec645c5d0841f9cb07861ca398fd5e2a14c2fe043ec94b764f45aefd46d67f2be77d6e412a23a8da72e0287f88d8f0c5d6c49b0631b119b849e5de8290970fb1338b380458968df2d1b9bdb51a3902a3b56832844f4df28ac666bbccee9df630cb904172b21401844ffd7d7a53572f129dc7bb28c8c1c55d1d9a617f74a2ec0063fb1358124051ca93ac241cb6eb04c23f2aaeb057ff3af4f2d5db8b6a8395e082", 0xa6, 0x35f}, {&(0x7f0000000140)="8e4611c3937af70b7143fd917bbed8b87ab89890fe0907b302bff6d1ad1f49276550e962f76695be77b1e019652bf1c2a6ef96b89563a1d581eaa48c935a5084a05235071844974912286840f13089eb9de2f2ba22a42264f6b295df0c9be5c0f9acf3e6c6c745359562abb4b2e64e95f5f4b9bbadccdc58d3c07991ff7ba7e178d2032f173c4734fe84ceb696ab2d836cbc9f79525d83180e", 0x99, 0xffffffffffffffb8}, {&(0x7f0000000300)="88f6c7e1fd0d05cdedb5477b8ec34dfe3637001757eab276e7266c69d84a6031dede5ea8cf827d7d47e3d4e86e75a9314fed382153efd7701da9b77b1119f7730cb21d", 0x43, 0x9}], 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6575632d6a702c747970653dd7f0dce42c7569643d", @ANYRESHEX, @ANYBLOB=',file_umask=00000000000000000200001,uid=', @ANYRESDEC=r4, @ANYBLOB="2c6973652c000076fd8d635ec206000000000000006247f008c92513d6"]) getpid() clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000200), 0x4) unshare(0x40000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'veth1_to_bridge\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x9, 0x3, "a901ab0ee674"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x5, @pix_mp={0x20, 0x3, 0x4f424752, 0x1, 0x4, [{0x7, 0x2f}, {0x8, 0x4}, {0x4, 0x8}, {0x20, 0x1000}, {0x7fff, 0x2}, {0x6, 0x8001}, {0x84bd, 0x2}, {0x1, 0x80000000}], 0x85, 0x7f, 0x6, 0x2, 0x5}}) 07:05:51 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) 07:05:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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") perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @perf_bp, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="c4f47f103fa7"}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1c8, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x200100) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 07:05:51 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be144a70a053dfcdeb987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000000200052203, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe80, 0x0, &(0x7f00000001c0)="5cdd30c37f3e0a6633c9f7b986dd", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 285.675077][ T9798] ntfs: (device loop2): parse_options(): Unrecognized mount option . 07:05:51 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80001d00c0d0) [ 285.804019][ T9804] hfs: invalid uid -1 [ 285.812313][ T9804] hfs: unable to parse mount options [ 285.908555][ T9821] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 286.000400][ T9818] IPVS: ftp: loaded support on port[0] = 21 07:05:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 07:05:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shutdown(0xffffffffffffffff, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @random="3b503239a227", @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'J\aN', 0x20, 0x21, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0x7}, @routing={0x1}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "ebb1e5", 0x0, "fb3f81"}}}}}}}, 0x0) 07:05:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x4125, 0x0, "c8b1b64a2ed1f7af78210bb5bb1b0ca160869f7738060f3c46208f35b0fa6068"}) 07:05:51 executing program 2 (fault-call:0 fault-nth:0): syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 286.312815][ T9856] FAULT_INJECTION: forcing a failure. [ 286.312815][ T9856] name failslab, interval 1, probability 0, space 0, times 1 [ 286.333855][ T9855] dccp_v6_rcv: dropped packet with invalid checksum [ 286.338972][ T9856] CPU: 0 PID: 9856 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 286.342614][ T9804] hfs: invalid uid -1 [ 286.349300][ T9856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.349306][ T9856] Call Trace: [ 286.349483][ T9856] dump_stack+0x188/0x20d [ 286.349537][ T9856] should_fail.cold+0x5/0xa [ 286.375680][ T9856] ? lock_downgrade+0x7f0/0x7f0 [ 286.380556][ T9856] ? fault_create_debugfs_attr+0x140/0x140 [ 286.386443][ T9856] should_failslab+0x5/0xf [ 286.389536][ T9818] IPVS: ftp: loaded support on port[0] = 21 [ 286.390953][ T9856] __kmalloc+0x2d9/0x7a0 [ 286.398272][ T9804] hfs: unable to parse mount options [ 286.401122][ T9856] ? __x64_sys_memfd_create+0x131/0x450 [ 286.407588][ T9865] dccp_v6_rcv: dropped packet with invalid checksum [ 286.411936][ T9856] ? strnlen_user+0x1f5/0x2e0 [ 286.411960][ T9856] __x64_sys_memfd_create+0x131/0x450 [ 286.428630][ T9856] ? ksys_write+0x19f/0x250 [ 286.433146][ T9856] ? memfd_fcntl+0x1720/0x1720 [ 286.437976][ T9856] ? __ia32_sys_clock_settime+0x260/0x260 [ 286.443771][ T9856] ? trace_hardirqs_off_caller+0x55/0x230 [ 286.449579][ T9856] do_syscall_64+0xf6/0x7d0 [ 286.454167][ T9856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.460088][ T9856] RIP: 0033:0x45c849 [ 286.463985][ T9856] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.483598][ T9856] RSP: 002b:00007fbebacc7a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 286.492023][ T9856] RAX: ffffffffffffffda RBX: 00007fbebacc86d4 RCX: 000000000045c849 [ 286.500001][ T9856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 286.507981][ T9856] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 286.515960][ T9856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 286.523943][ T9856] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000000 [ 286.766015][ T144] tipc: TX() has been purged, node left! 07:05:53 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x0, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 07:05:53 executing program 0: mkdir(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r0, 0x6) mount$9p_tcp(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x50004, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@afid={'afid', 0x3d, 0x2e8d}}, {@access_any='access=any'}], [{@dont_measure='dont_measure'}, {@fowner_eq={'fowner'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@hash='hash'}]}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="34b4714ffaec645c5d0841f9cb07861ca398fd5e2a14c2fe043ec94b764f45aefd46d67f2be77d6e412a23a8da72e0287f88d8f0c5d6c49b0631b119b849e5de8290970fb1338b380458968df2d1b9bdb51a3902a3b56832844f4df28ac666bbccee9df630cb904172b21401844ffd7d7a53572f129dc7bb28c8c1c55d1d9a617f74a2ec0063fb1358124051ca93ac241cb6eb04c23f2aaeb057ff3af4f2d5db8b6a8395e082", 0xa6, 0x35f}, {&(0x7f0000000140)="8e4611c3937af70b7143fd917bbed8b87ab89890fe0907b302bff6d1ad1f49276550e962f76695be77b1e019652bf1c2a6ef96b89563a1d581eaa48c935a5084a05235071844974912286840f13089eb9de2f2ba22a42264f6b295df0c9be5c0f9acf3e6c6c745359562abb4b2e64e95f5f4b9bbadccdc58d3c07991ff7ba7e178d2032f173c4734fe84ceb696ab2d836cbc9f79525d83180e", 0x99, 0xffffffffffffffb8}, {&(0x7f0000000300)="88f6c7e1fd0d05cdedb5477b8ec34dfe3637001757eab276e7266c69d84a6031dede5ea8cf827d7d47e3d4e86e75a9314fed382153efd7701da9b77b1119f7730cb21d", 0x43, 0x9}], 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6575632d6a702c747970653dd7f0dce42c7569643d", @ANYRESHEX, @ANYBLOB=',file_umask=00000000000000000200001,uid=', @ANYRESDEC=r4, @ANYBLOB="2c6973652c000076fd8d635ec206000000000000006247f008c92513d6"]) getpid() clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000200), 0x4) unshare(0x40000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'veth1_to_bridge\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x9, 0x3, "a901ab0ee674"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x5, @pix_mp={0x20, 0x3, 0x4f424752, 0x1, 0x4, [{0x7, 0x2f}, {0x8, 0x4}, {0x4, 0x8}, {0x20, 0x1000}, {0x7fff, 0x2}, {0x6, 0x8001}, {0x84bd, 0x2}, {0x1, 0x80000000}], 0x85, 0x7f, 0x6, 0x2, 0x5}}) 07:05:53 executing program 2 (fault-call:0 fault-nth:1): syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000300)='net/rt_acct\x00') pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e000000002000028006000100000000000c0002000a0000000a0000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="36553d37e665058bd125e73a61d38f23ff1ee12ec1337dca3db59a8303f35bd88859fde648acc3adb6e7ce6ebfb0eaad719eb66c3fd99bbbbcfaf716034730458b0eebc1df8de04419624647395d6ebfd51786587792ee3f6830caddc0fe5356ca998bc71037967693c05cae2b92fc17f14c03a1807e6efdd72c4567a4aca93dce2938ae36635b02611da47aa3d03478213d441d64be630f5d906e0d332f"], 0x7}}, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@netrom, @bcast, @netrom, @default, @rose, @rose]}, &(0x7f00000001c0)=0x40, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x1024}, {0xffffffffffffffff, 0x1000}, {r6, 0xa000}, {r7, 0x20a}, {r0, 0xa000}], 0x5, 0x0) 07:05:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 288.031127][ T9903] FAULT_INJECTION: forcing a failure. [ 288.031127][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 288.041525][ T9901] hfs: invalid uid -1 [ 288.062820][ T9901] hfs: unable to parse mount options [ 288.090400][ T9903] CPU: 0 PID: 9903 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.099025][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.109086][ T9903] Call Trace: [ 288.112394][ T9903] dump_stack+0x188/0x20d [ 288.116748][ T9903] should_fail.cold+0x5/0xa [ 288.121266][ T9903] ? lock_downgrade+0x7f0/0x7f0 [ 288.126132][ T9903] ? fault_create_debugfs_attr+0x140/0x140 [ 288.132059][ T9903] ? shmem_destroy_inode+0x70/0x70 [ 288.137191][ T9903] should_failslab+0x5/0xf [ 288.141618][ T9903] kmem_cache_alloc+0x29b/0x730 [ 288.146485][ T9903] ? find_held_lock+0x2d/0x110 [ 288.151350][ T9903] ? __alloc_fd+0x46d/0x600 [ 288.155872][ T9903] ? shmem_destroy_inode+0x70/0x70 [ 288.161001][ T9903] shmem_alloc_inode+0x18/0x40 [ 288.165779][ T9903] ? shmem_destroy_inode+0x70/0x70 [ 288.170900][ T9903] alloc_inode+0x61/0x1e0 [ 288.175236][ T9903] new_inode_pseudo+0x14/0xe0 [ 288.179926][ T9903] new_inode+0x1b/0x40 [ 288.184009][ T9903] shmem_get_inode+0x84/0x7e0 [ 288.185505][ T9901] IPVS: ftp: loaded support on port[0] = 21 [ 288.188699][ T9903] __shmem_file_setup.part.0+0x7a/0x2b0 [ 288.188725][ T9903] shmem_file_setup+0x61/0x90 [ 288.188744][ T9903] __x64_sys_memfd_create+0x28a/0x450 [ 288.188759][ T9903] ? memfd_fcntl+0x1720/0x1720 [ 288.188773][ T9903] ? __ia32_sys_clock_settime+0x260/0x260 [ 288.188791][ T9903] ? trace_hardirqs_off_caller+0x55/0x230 [ 288.188820][ T9903] do_syscall_64+0xf6/0x7d0 [ 288.188842][ T9903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.188853][ T9903] RIP: 0033:0x45c849 07:05:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 288.188870][ T9903] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.188876][ T9903] RSP: 002b:00007fbebacc7a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 288.188890][ T9903] RAX: ffffffffffffffda RBX: 00007fbebacc86d4 RCX: 000000000045c849 [ 288.188898][ T9903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 07:05:53 executing program 2 (fault-call:0 fault-nth:2): syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 288.188905][ T9903] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 288.188923][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 288.300613][ T9903] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000001 [ 288.372214][ T9917] FAULT_INJECTION: forcing a failure. [ 288.372214][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 288.385286][ T9917] CPU: 0 PID: 9917 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.393883][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.403941][ T9917] Call Trace: [ 288.407253][ T9917] dump_stack+0x188/0x20d [ 288.411604][ T9917] should_fail.cold+0x5/0xa [ 288.416123][ T9917] ? lock_downgrade+0x7f0/0x7f0 [ 288.420995][ T9917] ? fault_create_debugfs_attr+0x140/0x140 [ 288.426820][ T9917] should_failslab+0x5/0xf [ 288.431240][ T9917] kmem_cache_alloc+0x29b/0x730 [ 288.436100][ T9917] ? timestamp_truncate+0x20f/0x2f0 [ 288.441311][ T9917] ? inode_init_owner+0x330/0x330 [ 288.446399][ T9917] ? ktime_get_coarse_real_ts64+0xe5/0x280 [ 288.452229][ T9917] __d_alloc+0x2b/0x8d0 [ 288.456398][ T9917] d_alloc_pseudo+0x19/0x70 [ 288.460913][ T9917] alloc_file_pseudo+0xc6/0x250 [ 288.465771][ T9917] ? alloc_file+0x4d0/0x4d0 [ 288.470291][ T9917] ? lockdep_annotate_inode_mutex_key+0x3c/0x70 [ 288.476541][ T9917] ? shmem_get_inode+0x47a/0x7e0 [ 288.481498][ T9917] __shmem_file_setup.part.0+0x102/0x2b0 [ 288.487151][ T9917] shmem_file_setup+0x61/0x90 [ 288.491852][ T9917] __x64_sys_memfd_create+0x28a/0x450 [ 288.497238][ T9917] ? memfd_fcntl+0x1720/0x1720 [ 288.502006][ T9917] ? __ia32_sys_clock_settime+0x260/0x260 [ 288.507737][ T9917] ? trace_hardirqs_off_caller+0x55/0x230 [ 288.513481][ T9917] do_syscall_64+0xf6/0x7d0 [ 288.517993][ T9917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.523870][ T9917] RIP: 0033:0x45c849 [ 288.527755][ T9917] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.547366][ T9917] RSP: 002b:00007fbebacc7a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 288.555768][ T9917] RAX: ffffffffffffffda RBX: 00007fbebacc86d4 RCX: 000000000045c849 [ 288.563728][ T9917] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 288.571686][ T9917] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 288.579652][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 288.587619][ T9917] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000002 07:05:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x10000, 0x2d, 0x3, 0x7, 0x5, "74a5f98f2ed45b42bf8d7f1f968acdc21e8bd6"}) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x10000, 0x400, 0x98d, 0x8f0]}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffc) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:05:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 07:05:54 executing program 2 (fault-call:0 fault-nth:3): syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000100)={'bond0\x00', @ifru_flags=0x200}) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001600)=""/62, 0x3e}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x2, &(0x7f0000002680)=""/176, 0xb0}, 0x8303) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x5a8356036fd82edc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="9fa3d36853e7eb262bbe5992a600714869b8fe94f132dd1dafcbc1f1ff98e8ec733501da79972acd486f717076c636c73a8b63c225fa9c10f336a086b46710d85fd49041757e393650f9ead7170a37cc18ebdeb31be87c6c20237c642f377e82acf859f2b8c2ca3453cb8ebeb16df74699aeeb30833be11db6a88673af7fd2b9706beaa06795b9877660b3c6ee78c3eb96a715dd04a49cdfb5973f6b07547992edf7caf95743d06ab2bb469e0817f114e8e2db3e651445d314ba42be6edcc1cc10bd62892b1dab54a0873774df0c9d743f58f2909126b7455817978ee984da35e92cb35d10dbc3cf1a79913dea3e770093f36eaae41fde16dd19fbea2069196065df1eace0c79547274886637ae0912bb7259c5e4abf80b3426c85178c9bac8c379e4f3c9d65169df1b8acf0634d4fb5bfbc4e5caf99f17fc53aee2d42585a0c7f8c2fca190e9465ac9a501bf3d57b92246c45183cb484caa9d60f20f19dd5c00cf9feadea551aee666805214e767a9e26c04aca1c8e2e0e28d3e2a27aa7ac85628ff6c837967dcd3f9451e67291a56ce81f827ed881b7ae944d30efce4b15e217c52ebd020d7d18a6da90739b49690ef91b2f4b72331bf7b91bdaaee737c22f253802925ef07df26916b51005ae60307d404ec7ce97c94c542a6ad66939344af8708ddbcde6283ccfd758ca48e32b5ee22c7b3e6e8edb02a5997175e0bf5cec1949671d6d96d408eda75638031ea3177ce9cac3ff6534a21d49a56000907359c467f10f0ba122a375c325d6d03d66d174dab3a1ea4571e736ba9dfdd93a542556b13bd8d13f3ee3e8061a30776ab4e41ee470e7865f0f16eb24869b232b901a36f7d4980028dbaf880269b52162e53f780a8defdfc773c9b9275a05ba3662eed4279ac361475b767e99445969b16ee610c5521cc2d4a67103e01b054d826904407861f8fd12b707a87f2547f906172dcef5784aa57e7a9d3b223fc0aa1acc1606520de70d3c676ec247da8c1bdf7d5bdd116885ce3f0e339af0896490d767d19c68e1b55d881f40ac08f0584e2c25cbf10e4e917f6ac6ded30f435f1fc1751855ad26d3813ff98dbdec37798cd2d344cff488cc32b26ae9c23066c414c5eab4d4df72f5e1abb9d42a55bd856c9e04b2b2b7f88335c2e77bbb0d510e5aab7250fd2738c37dae148c61c8f7883b503be818c45c20f8b0551bfce3f03a9991ca1ac33d9051ae1ca7375f7288007bb5574840d2561e5780dc1d1b0e1af551cdef1cdec7462b55f66465816618be5309eb22ab2284495c52c721b06cc786b2c3bded72408f6c2a563a530b54fb0fdbc9158e7085919eac81dc61ddb7a016e4cfc62327cda3639fc06de00641448d3624b8f2d6511c2a753c4b9041a5ea5433c864dfebd4d9a01c4b0d4dc8ecd6fcf535444ff11fe6b9361537b48eddf7bfa4630f3d901fcb519ffd826cb96483dea988d06f3484f898069c36b2a9989a1fb04e02f97dd287e6bcb0a5d3ff77416b7275f668f522a7418dabf80dfe942b27bfa0e8fd233f92c6695efeb75213d899f2850a547c7965a75258b0b926d23ed847973d54327fe2c9b7ccb842c3531cf4593ca847038d0190b6e3bfc48005d28891ee0f1caf32e161c07a2451e041e4eb32b79f63f792683170c6de9a1f1f63f1f8a72e42d3e6fa55899b35af27cb9c3ff067a7dcd1e32716cc3a6d267891ef1f3a6ce44c86451d91c787306563466dc179ca0e3e2db5bd832a128927076047fec499138c1a70147e71d1b2c92985fe5306a1ae75a53ef19c74c3bc102de3f1247f5f3a84c85317e3cbee1cdf33b324f1c5bb91de33096971d0199abe8ff8242df8759fd7c2416c06d46d0bf9fa8324b6fe2eaae00be5585526cbe340c488dcd143da4692d1d6d705caaceba416efed7953e56bd90b71d111312f3cd2c69572f75b689e6002a24ce7e64ce66da55d4bcaab1adc0d48ba4c157c22b57a73291731b944f07c267683e23c6fb7e9193e8b3e2796a1c1d3a8b51723a8f5df5f32503e96a4089d8a3055e6df84533f6216a79f42338f47072f07f205deb73292180536d0ba816b1a6234d6337372cd9800926bd592b4241edc647512a3a54c737e3bbe8f68e7ed0574e012798e780b8d1f1f9a08b0bbbeaf9eba71d038f26336f10bb117c48f21b535ab1cf3af16c76529f2cded94edab0a59f1c364a84ffa96d3ca09c08bdfb8abd66d09323df9a100d3865b52b1677628de6ce24220fd4c9ee4d8577e620e96b5e48574a13318ac2c9b84d107882a37b1b7900e1a01607a820eaf91dd6322fcf9d7c3700fb49cf53649741b802cd7d2e4fa3b52841dff90053f7dfc19ad1459dfd0a009c521f6b4f2b4958aa6aface69ecdb7108d347db67e45654adf0f93c501666e1f75215f48f237cc42c4a0f98416efd7a83f8f3e7911a0eeef378088c1c7eaf9bfbfbd217a85af0d5f72780285f91bf2ebb9f237f3d26b89235ae4ae6457003d25ef36f5858d58696e762ecbde7f6ea550d85829972af111174236f28fa4aaf3430c06e81a2ed330fc18bfa16105dd4c775660d58e5954492d3ad2e073f028ebb84a950db341039444d4cfca0d6d685a971cbb64010247d14bf4653e81e73c5dddb4f5ea27d29d38def92cd8b4d4a681fa375e44468f1ebf0431410df38ac89b5cfd36e0942ea7ff754d6e41560662499389aa722bee5a776d902003991451010fbf8f16f91429f67b2bc48e1f3f3826c6d4a961ba3dce86d865ec417dbd76d282bc79d993a66bbfb9304be99e36d2789f4fb2f426de652e28aa6300fb2762d7bef425fce3d75d6b990a138dd07c13ff75e1753894a49de0c6a363f528fb7cfe2f5a71db51315da9b0b9fba6820c0d1861cde51654b8de9700127ecb550ed55484d52c978cadd291534bd17ef9bfac9df921c4397a33340900b79a2abbc33ab37feac82d6e8eebc01ebfeef6ff50559efe5cefe181327dc224acbbbccf814d7ad42694c6f22021e2dafbb023ed20a2ad2d16a7582019dd4e4fa3884e8eea80c274a94e26a97082ebad981fed174c7c8b00054d317767f9b0c0002c26ed2d736b7bd0834b72fe75b5c91ef8962c7880344330bddcb5deec8074dd395a4304c5acc7faed558e55c2a08d618f24f3354e85ed831df35ba155fd9c1c5248e275fa438753eba82a705280ae548136e5f662b45bdcf4b60223545a85471e6d6da11d1dc597d72a2a48392886764f4a94f6b38c8c63d8285a9797a889c04cc1a7e87a2c8e832c2e088b84205ba10b02e145e67d931414a5a92d9cc1c8d4d39345e3b86b5cb7423ebf2940937c79b91f24d6b6256d7122bb00d9180f1a036e534d008e7a8d3451756fd99ceb3852789a3b3e279e532c502bf1e431382411ed40c89814e6ba34fec187f349da670f44e9536b36f719d57fdc7ffebaaf267f7993de403834d6951201727bfc3d848fca399456870b873635844dbad0c0aa2f5c7a7e68d55ee8391ae5ae5216cb7aa1b6ee2fe985bfe4263e34e5ac15c6d1cf6e83afbbd0ab832464b12202a1ca4a0b5ea84f44be8dcc31c6179685e7c011cf581b4b37f77274ebf2edca2b1acf8549d53daca5c7e3f16ef99167f9cf128d73b8cd070bc93549053c6ccec55650d8d4a9ebf87a601a7c4077520c6dbaaccbbfa20629431ca572b910f87c069836cbdc61a40f59e32e4cd2f0d7e25c0a0737df6fe11ba0d5e580de4d74ed5d83c8c816aaf15f5a18ef47734ba52d4d709cfdb61ecda81192ac747fc3dcd9c3758584f68fe7ff74350d087e6d79f5bbfc4a91013affac8d1fb5e2e203ed6b6bbed96f147679e333de3691c6769433ef3d20e9404c9abbe2d05b321bfd28a56e9caabb5b524a9a201603758f913afe8ca0666f02ef44d8b0acfa69334ce7a46898c25ff1bc85d02b47d0b0d055db191bb361cb77324bd6c3b03a5e507c39150c3bb1de0a658493cb6b3ba231c7a7ccb7ac8eadbfa4184171528fdedfc488e729995c731d97ab025590b6b967f9980e24c3f36d2b1c8b61f2bde86e68e8a2c35fee69004cf588fc8cf878816670121bd0611e7de949cf462c76a8c624fc1b201c84907d872903d8cf2d61495806a70b84060c8815d751d9da87a77374a15331b16ecc3e09b9ff138f8e26c088256c0975853e5a588ad4cab8e092c54bbd2ca3354f78c44a215ed663b38c27049e03c7847ad9dcde67c47a71ad6c6be23ce66dcfdb757361da88d9e38124878247ef0cd7a7c0bca99b1ae2ae06d1377451192d48660876b3eb43b00ea7c5cfe90fcce65e18be42d9849ac608601e65c3d1c857165838f196b1c6a15dce387193d4caf3e6cce5e03b84e3ed692a5374bc1776fae383262f63add402c73136b51c13a934fcf06b2be1a04667d30014da1d191b9aafef0dfecbd36bd0207f8a19347f7f27aa1f0038586841bff4fe6c6474543b3e36a0e6685327f5740d106817c0b56314ef2e11033554310ea104776685c4d56d62d4dee03201cfcc3af404e7eac7adc1eb5e398be010e243303401e0d180a173a2ac501abcfd992eaee72c64b522a088ad3d8658332b3cffab49336b75788b614a4c43ef86cfc71f9361f4dfb6876933dd6cd82b912f83996b8ff5a44b5e20b2825d2bb74b909b8f17bc0e50a4ed46d42a92f709b0b298d0cfc48aa8d3d77b37a53787d3b85267cda43ff1e4dc5705b7943741783d316da972b900546ebb79388f91884132851f04046c9fe205f716029b4af2281ea88684afc19b6a0104b811cdbf4f5de8677072aea4b0e42ff933364d11bb853117aa2e815adeda966d948c625bfe0a9dddfb0c2b2fa19e2b1c20f3eac44da60c6c6867c69cee47db489d8dae4ba12f9ae157869f57bdde601dd2f930554109fdbd62c18922626cd08c8a0db0545e8681690d6f3ba9b66750e49c72d4c0293a648b43c6a456ad5160d042bc0d3eba0e8237030b2c0c928b721c84106756d559c7d8a9a1a63ad468810ab81ba1a9aae1e49143122892507dc9b7689538c0b78441205a536faa81590dd1917c24a257422a0e89fc845cec8e46d69effb27e14663b7dcdd97b11abd320c2c4d4930aaaa352c60a502a9740839b5ec851e0504d31dc4d67cd0ad5a313341e255e69a3c0a6146158942c7590847acdea16298b0128e1832d79d2cc0a73b6f850498e86025136f8b807fdb9cb71af60607b58483b398e81ca65367ea35db5a216037711f3b154e16f2f99fd510b5a857c9a7d1a7783cfe1482b86b332dbf87bb882e93e540ddd688e8241133c97eb50b3342cb08cb7eec229016da70d2abc8b22d213bb287d615a0050d70c6d6d07c4e531ea1f41ef63b346a510a3731850478ae6e54637075b97a4e396aa22be2f2fcca479db358bf2c7d57347297221fe6a2b0a4188db7381db4e083a9c0e377cae5a3fb9abfb8a6d670d3445b7c76107d238e94cf66e9b35029c603a6ff1625b8af6a1416b353cd3d65f76e01f3b8ce1bb114aae0c0898c178dd7e8a192548017af34ff161ad7059ac322859b61d635bf5058f4eb15fba7b4850d2b8c4b1e6cabbafe580d0fe4083a3a12bc0fe0d3a2d2999f00ce0896ebead85cfd1d661a955cba4b14d693a125ada661ef13467530f12974959cd7760ea4053f6cf369862d42bb20693a4c3862487970fdd1feed20480dc168f2bba2a95eacf54300e463846dc7e0d96616135e9cac1c7edc65349b5a452937d8c4edcd0ba39e5fdce82d4352241bb3c275034c5bd582d06f817f34bba3c7cf8d861b7f4ff37101cfd91c3059addffca6bc33ffec4a2f2"], 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r8, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x9}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd9a}]}, 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x830004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="434e8b117eff3ed57ff8e3a3d41d7518"}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x7fff, 0xfffffffc, 0x800, 0x5]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x82, &(0x7f00000000c0)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000002780)={r5, 0x7fff}, 0x8) r9 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_ifreq(r10, 0x8922, &(0x7f00000014c0)={'bond0\x00', @ifru_flags=0x6dbbce78125ac468}) [ 288.831466][ T9936] FAULT_INJECTION: forcing a failure. [ 288.831466][ T9936] name failslab, interval 1, probability 0, space 0, times 0 [ 288.915705][ T9936] CPU: 1 PID: 9936 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 288.924327][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.934389][ T9936] Call Trace: [ 288.937704][ T9936] dump_stack+0x188/0x20d [ 288.942058][ T9936] should_fail.cold+0x5/0xa [ 288.946578][ T9936] ? lock_downgrade+0x7f0/0x7f0 [ 288.951452][ T9936] ? fault_create_debugfs_attr+0x140/0x140 [ 288.957285][ T9936] should_failslab+0x5/0xf [ 288.961857][ T9936] kmem_cache_alloc+0x29b/0x730 [ 288.966732][ T9936] ? lock_downgrade+0x7f0/0x7f0 [ 288.971607][ T9936] __alloc_file+0x21/0x340 [ 288.976048][ T9936] alloc_empty_file+0x6d/0x170 [ 288.980832][ T9936] alloc_file+0x5e/0x4d0 [ 288.985095][ T9936] alloc_file_pseudo+0x165/0x250 [ 288.990045][ T9936] ? alloc_file+0x4d0/0x4d0 [ 288.994566][ T9936] ? shmem_get_inode+0x47a/0x7e0 [ 288.999533][ T9936] __shmem_file_setup.part.0+0x102/0x2b0 [ 289.005189][ T9936] shmem_file_setup+0x61/0x90 [ 289.009880][ T9936] __x64_sys_memfd_create+0x28a/0x450 [ 289.015268][ T9936] ? memfd_fcntl+0x1720/0x1720 [ 289.020040][ T9936] ? __ia32_sys_clock_settime+0x260/0x260 [ 289.025800][ T9936] ? trace_hardirqs_off_caller+0x55/0x230 [ 289.031541][ T9936] do_syscall_64+0xf6/0x7d0 [ 289.036060][ T9936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.041956][ T9936] RIP: 0033:0x45c849 [ 289.045859][ T9936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.065468][ T9936] RSP: 002b:00007fbebacc7a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 289.073889][ T9936] RAX: ffffffffffffffda RBX: 00007fbebacc86d4 RCX: 000000000045c849 [ 289.081867][ T9936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 289.089849][ T9936] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 289.097835][ T9936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 289.105815][ T9936] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000003 [ 289.545094][ T9939] fuse: Bad value for 'fd' [ 289.721288][ T9939] fuse: Bad value for 'fd' 07:05:55 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, 0x0, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:05:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x0) 07:05:55 executing program 0: mkdir(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r0, 0x6) mount$9p_tcp(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x50004, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@afid={'afid', 0x3d, 0x2e8d}}, {@access_any='access=any'}], [{@dont_measure='dont_measure'}, {@fowner_eq={'fowner'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@hash='hash'}]}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="34b4714ffaec645c5d0841f9cb07861ca398fd5e2a14c2fe043ec94b764f45aefd46d67f2be77d6e412a23a8da72e0287f88d8f0c5d6c49b0631b119b849e5de8290970fb1338b380458968df2d1b9bdb51a3902a3b56832844f4df28ac666bbccee9df630cb904172b21401844ffd7d7a53572f129dc7bb28c8c1c55d1d9a617f74a2ec0063fb1358124051ca93ac241cb6eb04c23f2aaeb057ff3af4f2d5db8b6a8395e082", 0xa6, 0x35f}, {&(0x7f0000000140)="8e4611c3937af70b7143fd917bbed8b87ab89890fe0907b302bff6d1ad1f49276550e962f76695be77b1e019652bf1c2a6ef96b89563a1d581eaa48c935a5084a05235071844974912286840f13089eb9de2f2ba22a42264f6b295df0c9be5c0f9acf3e6c6c745359562abb4b2e64e95f5f4b9bbadccdc58d3c07991ff7ba7e178d2032f173c4734fe84ceb696ab2d836cbc9f79525d83180e", 0x99, 0xffffffffffffffb8}, {&(0x7f0000000300)="88f6c7e1fd0d05cdedb5477b8ec34dfe3637001757eab276e7266c69d84a6031dede5ea8cf827d7d47e3d4e86e75a9314fed382153efd7701da9b77b1119f7730cb21d", 0x43, 0x9}], 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6575632d6a702c747970653dd7f0dce42c7569643d", @ANYRESHEX, @ANYBLOB=',file_umask=00000000000000000200001,uid=', @ANYRESDEC=r4, @ANYBLOB="2c6973652c000076fd8d635ec206000000000000006247f008c92513d6"]) getpid() clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000200), 0x4) unshare(0x40000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'veth1_to_bridge\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x9, 0x3, "a901ab0ee674"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x5, @pix_mp={0x20, 0x3, 0x4f424752, 0x1, 0x4, [{0x7, 0x2f}, {0x8, 0x4}, {0x4, 0x8}, {0x20, 0x1000}, {0x7fff, 0x2}, {0x6, 0x8001}, {0x84bd, 0x2}, {0x1, 0x80000000}], 0x85, 0x7f, 0x6, 0x2, 0x5}}) 07:05:55 executing program 2 (fault-call:0 fault-nth:4): syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:55 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xc1d23d7aecb9fac2, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000004}, 0xe437d1f61fdcb98f) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x200) write$P9_RLERROR(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x19) [ 289.870033][ T9970] device lo entered promiscuous mode [ 289.884902][ T9971] FAULT_INJECTION: forcing a failure. [ 289.884902][ T9971] name failslab, interval 1, probability 0, space 0, times 0 [ 289.909127][ T9972] hfs: invalid uid -1 07:05:55 executing program 3 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 289.922617][ T9972] hfs: unable to parse mount options [ 289.925983][ T9966] device lo left promiscuous mode [ 289.972257][ T9971] CPU: 1 PID: 9971 Comm: syz-executor.2 Not tainted 5.6.0-rc7-syzkaller #0 [ 289.980888][ T9971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.990946][ T9971] Call Trace: [ 289.994344][ T9971] dump_stack+0x188/0x20d [ 289.998689][ T9971] should_fail.cold+0x5/0xa [ 290.003199][ T9971] ? lock_downgrade+0x7f0/0x7f0 [ 290.008056][ T9971] ? fault_create_debugfs_attr+0x140/0x140 [ 290.013878][ T9971] should_failslab+0x5/0xf [ 290.018300][ T9971] kmem_cache_alloc+0x29b/0x730 [ 290.023159][ T9971] ? kmem_cache_alloc+0x358/0x730 [ 290.028279][ T9971] security_file_alloc+0x34/0x160 [ 290.033313][ T9971] __alloc_file+0xd8/0x340 [ 290.037729][ T9971] alloc_empty_file+0x6d/0x170 [ 290.042515][ T9971] alloc_file+0x5e/0x4d0 [ 290.046763][ T9971] alloc_file_pseudo+0x165/0x250 [ 290.051696][ T9971] ? alloc_file+0x4d0/0x4d0 [ 290.056211][ T9971] ? shmem_get_inode+0x47a/0x7e0 [ 290.061162][ T9971] __shmem_file_setup.part.0+0x102/0x2b0 [ 290.066816][ T9971] shmem_file_setup+0x61/0x90 [ 290.071496][ T9971] __x64_sys_memfd_create+0x28a/0x450 [ 290.076869][ T9971] ? memfd_fcntl+0x1720/0x1720 [ 290.081629][ T9971] ? __ia32_sys_clock_settime+0x260/0x260 [ 290.087350][ T9971] ? trace_hardirqs_off_caller+0x55/0x230 [ 290.093080][ T9971] do_syscall_64+0xf6/0x7d0 [ 290.097586][ T9971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.103508][ T9971] RIP: 0033:0x45c849 [ 290.107399][ T9971] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.127022][ T9971] RSP: 002b:00007fbebacc7a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 290.135431][ T9971] RAX: ffffffffffffffda RBX: 00007fbebacc86d4 RCX: 000000000045c849 [ 290.143397][ T9971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c1941 [ 290.151362][ T9971] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000001 [ 290.159334][ T9971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 290.167325][ T9971] R13: 0000000000000be7 R14: 00000000004ce08e R15: 0000000000000004 [ 290.238540][ T9972] IPVS: ftp: loaded support on port[0] = 21 [ 290.334745][ T9984] device dummy0 entered promiscuous mode [ 290.403059][ T9984] device dummy0 left promiscuous mode [ 290.412152][ T9982] FAULT_INJECTION: forcing a failure. [ 290.412152][ T9982] name failslab, interval 1, probability 0, space 0, times 0 [ 290.471351][ T9982] CPU: 0 PID: 9982 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 290.479992][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.490058][ T9982] Call Trace: [ 290.493365][ T9982] dump_stack+0x188/0x20d [ 290.497721][ T9982] should_fail.cold+0x5/0xa [ 290.502250][ T9982] ? fault_create_debugfs_attr+0x140/0x140 [ 290.508087][ T9982] should_failslab+0x5/0xf [ 290.512532][ T9982] kmem_cache_alloc_trace+0x2d0/0x7d0 [ 290.517917][ T9982] ? mark_lock+0xbc/0x1220 [ 290.522355][ T9982] alloc_pipe_info+0x10a/0x4f0 [ 290.527195][ T9982] splice_direct_to_actor+0x771/0x980 [ 290.532658][ T9982] ? apparmor_path_rmdir+0x30/0x30 [ 290.537795][ T9982] ? generic_pipe_buf_nosteal+0x10/0x10 [ 290.543364][ T9982] ? do_splice_to+0x160/0x160 [ 290.548055][ T9982] ? security_file_permission+0x8a/0x370 [ 290.553717][ T9982] do_splice_direct+0x1a8/0x270 [ 290.558584][ T9982] ? splice_direct_to_actor+0x980/0x980 [ 290.564214][ T9982] ? __this_cpu_preempt_check+0x28/0x190 [ 290.569876][ T9982] do_sendfile+0x549/0xc40 [ 290.574319][ T9982] ? do_compat_pwritev64+0x1b0/0x1b0 [ 290.579646][ T9982] __x64_sys_sendfile64+0x1cc/0x210 [ 290.584859][ T9982] ? __ia32_sys_sendfile+0x220/0x220 [ 290.590324][ T9982] ? fpregs_mark_activate+0x320/0x320 [ 290.595717][ T9982] ? trace_hardirqs_off_caller+0x55/0x230 [ 290.601464][ T9982] do_syscall_64+0xf6/0x7d0 [ 290.605994][ T9982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.611891][ T9982] RIP: 0033:0x45c849 [ 290.615795][ T9982] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.635406][ T9982] RSP: 002b:00007fbf6e456c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 290.643827][ T9982] RAX: ffffffffffffffda RBX: 00007fbf6e4576d4 RCX: 000000000045c849 [ 290.651806][ T9982] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 290.659786][ T9982] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 07:05:56 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 290.667885][ T9982] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 290.675905][ T9982] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000000 07:05:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x85000) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0xc1d23d7aecb9fac2, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000004}, 0xe437d1f61fdcb98f) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x200) write$P9_RLERROR(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x19) [ 290.817161][T10010] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 290.890032][T10016] device lo entered promiscuous mode [ 290.908516][T10015] device lo left promiscuous mode 07:05:56 executing program 3 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:56 executing program 0: mkdir(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x2010, r0, 0x6) mount$9p_tcp(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x50004, &(0x7f0000000780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@afid={'afid', 0x3d, 0x2e8d}}, {@access_any='access=any'}], [{@dont_measure='dont_measure'}, {@fowner_eq={'fowner'}}, {@seclabel='seclabel'}, {@permit_directio='permit_directio'}, {@hash='hash'}]}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x3, &(0x7f0000000380)=[{&(0x7f0000000080)="34b4714ffaec645c5d0841f9cb07861ca398fd5e2a14c2fe043ec94b764f45aefd46d67f2be77d6e412a23a8da72e0287f88d8f0c5d6c49b0631b119b849e5de8290970fb1338b380458968df2d1b9bdb51a3902a3b56832844f4df28ac666bbccee9df630cb904172b21401844ffd7d7a53572f129dc7bb28c8c1c55d1d9a617f74a2ec0063fb1358124051ca93ac241cb6eb04c23f2aaeb057ff3af4f2d5db8b6a8395e082", 0xa6, 0x35f}, {&(0x7f0000000140)="8e4611c3937af70b7143fd917bbed8b87ab89890fe0907b302bff6d1ad1f49276550e962f76695be77b1e019652bf1c2a6ef96b89563a1d581eaa48c935a5084a05235071844974912286840f13089eb9de2f2ba22a42264f6b295df0c9be5c0f9acf3e6c6c745359562abb4b2e64e95f5f4b9bbadccdc58d3c07991ff7ba7e178d2032f173c4734fe84ceb696ab2d836cbc9f79525d83180e", 0x99, 0xffffffffffffffb8}, {&(0x7f0000000300)="88f6c7e1fd0d05cdedb5477b8ec34dfe3637001757eab276e7266c69d84a6031dede5ea8cf827d7d47e3d4e86e75a9314fed382153efd7701da9b77b1119f7730cb21d", 0x43, 0x9}], 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="696f636861727365743d6575632d6a702c747970653dd7f0dce42c7569643d", @ANYRESHEX, @ANYBLOB=',file_umask=00000000000000000200001,uid=', @ANYRESDEC=r4, @ANYBLOB="2c6973652c000076fd8d635ec206000000000000006247f008c92513d6"]) getpid() clone3(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x105041, 0x0) getresuid(&(0x7f0000000240), &(0x7f00000002c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000200), 0x4) unshare(0x40000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'veth1_to_bridge\x00', &(0x7f0000000500)=@ethtool_wolinfo={0x6, 0x9, 0x3, "a901ab0ee674"}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000680)={0x5, @pix_mp={0x20, 0x3, 0x4f424752, 0x1, 0x4, [{0x7, 0x2f}, {0x8, 0x4}, {0x4, 0x8}, {0x20, 0x1000}, {0x7fff, 0x2}, {0x6, 0x8001}, {0x84bd, 0x2}, {0x1, 0x80000000}], 0x85, 0x7f, 0x6, 0x2, 0x5}}) 07:05:56 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3f, 0xffffffffffffff80}, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x4061e000) r0 = socket(0xa, 0x1, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x88100) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r3, r0, 0x0, 0x7ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x537d, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf) socket$netlink(0x10, 0x3, 0x12) [ 291.054226][T10026] FAULT_INJECTION: forcing a failure. [ 291.054226][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 291.098586][T10028] hfs: invalid uid -1 [ 291.102906][T10027] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 291.131127][T10026] CPU: 1 PID: 10026 Comm: syz-executor.3 Not tainted 5.6.0-rc7-syzkaller #0 [ 291.139839][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.149904][T10026] Call Trace: [ 291.153200][T10026] dump_stack+0x188/0x20d [ 291.157544][T10026] should_fail.cold+0x5/0xa [ 291.162056][T10026] ? fault_create_debugfs_attr+0x140/0x140 [ 291.167902][T10026] should_failslab+0x5/0xf [ 291.172322][T10026] __kmalloc+0x2d9/0x7a0 [ 291.176552][T10026] ? kmem_cache_alloc_trace+0x390/0x7d0 [ 291.182097][T10026] ? alloc_pipe_info+0x1e0/0x4f0 [ 291.187031][T10026] ? aa_file_perm+0x5be/0x14d0 [ 291.191803][T10026] alloc_pipe_info+0x1e0/0x4f0 [ 291.196573][T10026] splice_direct_to_actor+0x771/0x980 [ 291.201940][T10026] ? apparmor_path_rmdir+0x30/0x30 [ 291.207140][T10026] ? __lock_acquire+0x14bd/0x3ca0 [ 291.212189][T10026] ? generic_pipe_buf_nosteal+0x10/0x10 [ 291.217861][T10026] ? do_splice_to+0x160/0x160 [ 291.222554][T10026] ? security_file_permission+0x8a/0x370 [ 291.228215][T10026] do_splice_direct+0x1a8/0x270 [ 291.233071][T10026] ? splice_direct_to_actor+0x980/0x980 [ 291.238630][T10026] ? __this_cpu_preempt_check+0x28/0x190 [ 291.244274][T10026] do_sendfile+0x549/0xc40 [ 291.248707][T10026] ? do_compat_pwritev64+0x1b0/0x1b0 [ 291.254019][T10026] ? wait_for_completion+0x3c0/0x3c0 [ 291.259304][T10026] ? vfs_write+0x15b/0x5c0 [ 291.263721][T10026] __x64_sys_sendfile64+0x1cc/0x210 [ 291.268910][T10026] ? ksys_write+0x19f/0x250 [ 291.273401][T10026] ? __ia32_sys_sendfile+0x220/0x220 [ 291.279642][T10026] ? __ia32_sys_clock_settime+0x260/0x260 [ 291.285356][T10026] ? trace_hardirqs_off_caller+0x55/0x230 [ 291.291097][T10026] do_syscall_64+0xf6/0x7d0 [ 291.295601][T10026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.301485][T10026] RIP: 0033:0x45c849 [ 291.305370][T10026] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.324962][T10026] RSP: 002b:00007fbf6e456c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 291.333372][T10026] RAX: ffffffffffffffda RBX: 00007fbf6e4576d4 RCX: 000000000045c849 [ 291.341343][T10026] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 291.349314][T10026] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 291.357275][T10026] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 291.365235][T10026] R13: 00000000000008d4 R14: 00000000004cb786 R15: 0000000000000001 [ 291.387224][T10028] hfs: unable to parse mount options [ 291.477985][T10035] IPVS: ftp: loaded support on port[0] = 21 [ 291.493249][T10027] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:57 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:57 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:57 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 07:05:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x89, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="536e0000030000000f05ad7fb11a9214ea49f663805ba1f420ba00"]) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x5a8356036fd82edc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x82, &(0x7f00000000c0)={r6}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r6, 0x7f}, 0x8) 07:05:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 292.427430][T10080] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:58 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x400, 0x8001, 0x6], 0x3, 0x100, 0x1, 0x9, 0x0, 0x4, 0x8, {0x0, 0x0, 0x100, 0xa6c, 0x6, 0xff, 0x0, 0x3ff, 0x3d4, 0xf801, 0x4, 0x3f, 0x9, 0x8001, "5ba9b2b994a54f01cbbdec290d82c1f33149d517f44fff6912ac9bda46e5db1d"}}) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0x0, 0x2}, 0x10) r4 = getpgrp(0x0) setpriority(0x0, r4, 0xffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000040)={0xfffffc01, "98d3c39b3b53f894a5f7c399019d241c7b59144503f5b3cfa1a8271b1ba6f3e0", 0x5, 0x1000, 0x3a8, 0x3b04, 0x1, 0x0, 0x100}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003e00080026bd1d8b57985cdfc27000fbdbdf250a00000074347c1b1b5593d3a898c38a91dd417325970d8ecd6e231496a69556f1a37f28a53845b88b254a7d739ba9581bd9642227c5cb506809b378d8548a0e2885f0ba4ca686e23824bc03e0f3e3742d3270e41efdeb4fe844ffec7ae6"], 0x14}}, 0x1) 07:05:58 executing program 1: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) getpriority(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x24) socket(0x3, 0x0, 0xa) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) sched_setscheduler(0x0, 0x0, 0x0) capget(&(0x7f0000000000), 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x12640, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100eb801e0000008c0606000000f4b215e2f0ccdcc23ebdc8163381416a39ea17b42dfb22518d2911d159603e0819a736c752cd51ca498eaf8d4d6305f0859b2c0ba93e59283d4266efb753846a2f6600e9056c992954b83d3d64ef949e275ee5102d23c1b49f6499410a923f41c45b2f75028efff57e230820610343cf4ceed5b47ffd6fabf58681fb89291fb9c3f722c2ee0547740900b01de8fde5af04fca1f1e68361211bba8d515a76bbba61b40d79079459d29acce7fae6417319d3f0bf43a1fc96f30d48e4b080a630b8aeb7b3d61a166f66da0100", @ANYRES32, @ANYBLOB, @ANYRESHEX], 0x4, 0x0) r0 = getpgid(0x0) kcmp(0x0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) unshare(0x600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/31, 0x1f}], 0x1, 0x1) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x10, 0xffffffffffffffff, 0x3f000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'team_slave_0\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) [ 292.545116][T10080] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xae2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:58 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x9, 0x4, [0x8]}) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1a, 0x8008, 0x0, 0x38}}, 0xfffffdef) 07:05:58 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:58 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000001c0)) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00270c59ece5cc"], 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={@ipv4={[0x0, 0x5, 0x4], [], @initdev}}, 0x30) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="7700000093e7a9043566191c1b26b447886e9e423a1ecedead2e360519d66bbbf4f3094284db142caf62c9fa0c1974e12d3749c55360017bd86ad3ad602d93f74f9d39b7094257151e6f9578404bddfb2ea0db99921607130c8e3ab80547ec10f6f7f0f1ed1478d9965b41ffb15420"], &(0x7f0000000380)=0x7f) r4 = open(&(0x7f00000000c0)='./bus\x00', 0xa4080, 0xf0) bind$ax25(r4, &(0x7f0000000200)={{0x3, @bcast, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 292.934191][ T27] audit: type=1804 audit(1585551958.435:23): pid=10115 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir683430148/syzkaller.ZwJeWN/56/bus" dev="sda1" ino=15958 res=1 [ 292.939691][T10116] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 293.034004][ T27] audit: type=1804 audit(1585551958.535:24): pid=10120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir683430148/syzkaller.ZwJeWN/56/bus" dev="sda1" ino=15958 res=1 [ 293.325050][ T27] audit: type=1804 audit(1585551958.535:25): pid=10120 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir683430148/syzkaller.ZwJeWN/56/bus" dev="sda1" ino=15958 res=1 [ 293.361915][T10116] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:05:59 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:05:59 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) listen(r1, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r2, r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409d020ce89f347f85954148506ada508304f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439715fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463d225ffcc2357e053c0ba88cdce1e394b0c4896e5ee5b1de0dd94615ce05f1eec2510cf313e", 0x82, r3) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000004c0)='>', 0x1, 0xfffffffffffffffe) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000140), 0x4) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r8, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000380)=0x1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\x00'}}) 07:05:59 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:59 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x9, 0x4, [0x8]}) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1a, 0x8008, 0x0, 0x38}}, 0xfffffdef) 07:05:59 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() syz_open_procfs(0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101d0) socket(0x1e, 0x4, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0) socket(0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) keyctl$chown(0x4, 0x0, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 07:05:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x282000, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:05:59 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:05:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xfaf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x680802, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000000)=0x5a8356036fd82edc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x82, &(0x7f00000000c0)={r4}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x2}, 0x8) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:05:59 executing program 0: r0 = socket$inet(0x2, 0x4, 0x0) r1 = creat(0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140), 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x800) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5fd3, 0x420603) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) setsockopt$inet_tcp_int(r0, 0x6, 0x1e1fae08a66b387e, &(0x7f0000000300)=0x10000280, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x10, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x3, {0x7, 0xf0, 0x4}, {0x2, 0xff, 0x1}, 0xfd, 0x2}, {0x3, 0x2, {0x0, 0xff, 0x3}, {0x0, 0xff, 0x3}, 0xfd, 0x1}, {0x1, 0x1, {0x2, 0xff, 0x1}, {0x0, 0xf0, 0x3}, 0xfe, 0xfe}], 0x60) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0xffffffff, 0x4, 0x4, 0x0, 0x9, {0x77359400}, {0x0, 0x8, 0x7, 0xcc, 0x5, 0x3, "46c968a4"}, 0x9, 0x3, @offset=0xcc5}) shutdown(r3, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 07:05:59 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:00 executing program 1: sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x50, 0x4, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6246e39b}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18c4358d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f6c0843}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x65bce33d}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000003fc9efb9f143078ce5ce3dac15e5c02b3b3e2b92ca9c43c45d9dc7be273de57f23c751cb0d376cf5ac856a20c026475dbafbda080eaa654a7b8ae2d03a7995f1410efebb9dd5557029ff7336cdbd5707c9a671acb7171cfe2b771febd8198410367c667c915a64f3f55046694e38484df1cb84683c5a64c1a47c6f2a00000000000000000000000000000036b31c3458e8dd131c02fe848701264da779d1d476e50cf691cd4f386f07d78e6ea3d20e4a7ac55eede9102eb867bf7b80ad3506dc1f37dd79f7057b851cbe79af14074e3aa8bbcb54f9ce6b8aeade06661cf1d9098e4e17172e18a6077e235014104f646defb73c96db16d7d53aeb3405000000cc9c1d9b97cc0f555cff6f31725a1c0e83f49b8d960abd9fafa427f4bf42b359af43e50ede825ebd3f450f0f50d27b42836b61dc10c33f950c9d657435e516f933b2a3f17ca39b667a5a8f3f2c7b5437aa85d0faf17d438c4c1f8d6ce894e59ba7ca72089b302835b56e6284efe648960f6d1a22ce0b4181f88f621db4f3a637d270ba202de4258f32754c45dc078636f38611ddc7eca23da3458d651bbd12b08f29ef8634645d83d36c1c80fe3dacf8b5561cfe2373d36e0adbfd273100"/460, @ANYRES16=r2, @ANYBLOB="00002abd7000fbdbdf250c00000004000b00110007008b31d33a6366334c8f835fd9e00000002000508005000200040000000800088004000200040005000800070000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4844}, 0x40000) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3f) [ 294.627364][ T144] tipc: TX() has been purged, node left! [ 294.778534][ T144] tipc: TX() has been purged, node left! 07:06:00 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x80001d00c0d0) 07:06:00 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x9, 0x4, [0x8]}) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r1 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1a, 0x8008, 0x0, 0x38}}, 0xfffffdef) 07:06:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0xb}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x240040, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) open_by_handle_at(r6, &(0x7f00000001c0)={0x8f, 0x80000001, "51b6dcc2309e681c5cd4d617e88f519be2a17c438ce48c80bf192c6af9be2f842f0eaee4a177ada1b8bd6a2fde71cd5baf3e739733ec8392367249e0bf269dadde0deedde8d147409f28777e7e988c523a0efe497e3b653c6bbd4e2d701346e7243c3c198cbc7e706ba6c6dd415174b9300c74d4aaa7117f9d7957d125ba09522a4003d9ffc6bb"}, 0x900) 07:06:00 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x12000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) linkat(r0, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x30, 0x61, 0x37, 0x31, 0x39, 0x62], 0x2d, [0xb, 0x65, 0x35, 0x34], 0x2d, [0x66, 0x7d, 0x61, 0x37], 0x2d, [0x66, 0x64, 0x35, 0x31], 0x2d, [0x35, 0x63, 0x64, 0x64, 0x32, 0x61, 0x65, 0x35]}}}, {@obj_user={'obj_user', 0x3d, ')nodevnodevnodev-[}GPL}'}}, {@context={'context', 0x3d, 'staff_u'}}, {@audit='audit'}, {@smackfsfloor={'smackfsfloor', 0x3d, '-('}}, {@obj_role={'obj_role', 0x3d, 'vboxnet1)vmnet0-{'}}, {@obj_role={'obj_role'}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r3}}]}}) 07:06:00 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 294.942983][ T144] tipc: TX() has been purged, node left! [ 295.062721][T10218] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 295.072175][ T144] tipc: TX() has been purged, node left! 07:06:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 295.116458][T10221] overlayfs: unrecognized mount option "./file0" or missing value [ 295.143254][T10218] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 295.176861][T10221] fuse: Unknown parameter 'fsuuid' 07:06:00 executing program 0: r0 = socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) sendmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)="4f2caea82d01666b2a072bbd5491a814fa2817cc52b223e0cb2fdf137e5e632a9f81d3c5b182653576302b878b5a9df4d95cfbe84b493dfad0b286c78b7430d184f1ae200ef077dae9dbe49222853b2213de6364", 0x54}, {&(0x7f0000000100)}, {&(0x7f0000000140)="09aca713e04546c68c39a489c7a7dbde3d02fa3696a2a8b887846c1313f9aa89eaedc5b03327fa8510df35b4b5571ba3c62e34efe9259dbc3e60f4470f29a6", 0x3f}, {&(0x7f0000000180)="67b036bc06bda496e9380450d4e3d54831d76163d2dede7ef0e436a2575ce8267e141777b9303255f0841443cf10745a36ec1ac91b4844cd59c9ab3b80f94c291289a9c97b3866b713d458604603c273b988104d4ece0b7736290fbd31de7b1748cf3ec0e14e31869b21a604d8029d07775570e50f5229d86cf9be148e81b33dc8e9bdda63b8a7a916f53233025d14e2e2fc7c82c9a4117acb2b952ca13f41f684bbaf", 0xa3}, {&(0x7f0000000240)="c277b5e3ed7d18fbfae61a924075dce38a896a00576b06efa818e70009263f84bcda3c35d43036d7955e6b058c1b9981124b79242a3ccdc0ca14ef7216e103097adb64e93be7a6bf4e1079526815a7db260f5dd82aa1c46c560c2a0109b63f04f4e1e7b42350eaf3e15f67b3d3406979d697b1ec", 0x74}, {&(0x7f00000002c0)="236e969b97b8", 0x6}, {&(0x7f0000000300)="2ed6defc319a0c04c0fa45cac41272cb845baae2bbd198284a80f5e1d40e566531da11", 0x23}, {&(0x7f0000000340)="1776a5a935140349df5968e43bc7a2ffa12a55d9e04f425d5e583c994128945fd1913bc2bcacec15e8ac838f3d18b3637d527f8cd307d7e4d49ba54f6558dfc91081aa93ad2a7e78e6250606fa36a1a3a0b21392", 0x54}, {&(0x7f0000000400)="8419e324b4e51ec5f6674a2c744da24f5290b801062b9036ae1397c983e14de690a28b8bb78ad16b827332adfcaa8f15034f56510e8c5f169f6015eb14bccf2f2c9c6d47c3cdde59a16df947566f8c67ef3dfff1c525a2e30c9a2c86d9", 0x5d}], 0x9, &(0x7f0000000540)=[{0x90, 0x3a, 0x3, "a8fe799165241d94a3695d45ce846690f39f887347f81907f6b37b207993aa1d432568cc313a602a14a89ae9f1f6db23f6f185aa78f2bf9882abba0f6039d7745e577e70de0672ca94c625222105cc5510190c5a6bd0090784f0521d401777e2777286b141b2143c3dd72d7e78caecbcb9b8b9d6d324a6461b01731351"}, {0x108, 0x102, 0x6, "2c1869ff1810945fc25caabd1c56f4f9b04cdd1adb5296e7a66225cd1a2e1eab53245a5addf5dcf6d4e36274448b6331a0c13f9d27d2940eb0b19e40d85233f6e2cb64f8b048e5fa04266f75e5676a78bcf6006703be9318fd74f7cd113951f9d1aee712ee620bfbe1aef0cc111eed80630076a7a8121ffc089513a06cc61f01cf91df66345640b90325c1e6799a8c64a2507da5921afeba3e26520a8dff62929b19412c9f4bb5616ae75715dbe2123d6aa4ef0d8325d99c9b72076bd8138e999bbe9108923902fd43cb6b817f7a944676bf75adda4572f0bf377080c02dac3983dd1ba23eeb7f1e9a500d0e1e69b33f386a"}, {0xf8, 0x10e, 0x25e, "9772ca76ac56cf22f4abbd73a1974dfc28585ef37bdb3e65acd66806e0d11f9fd453193118e17e523812fc3c061d5d8c7d0490be9c827154ad880fa51e2131a14bdd23507db5da351261303d7247af370791881ac9519012f67baeb91da063df509ec2fdfa9da56233cb1107169f6ebd6bdcf562cd31b45873460d233d6e61707e396506a237dfc03393d118f5ee5256c18d5b486a37a0d9b4ecb0226b768e9edbbaf35f0a05a9ba5ecf2a3a0fd9bd2cfeffe2dc0e0bf9ec225ab13ec6a242d2503d5b6915af673273c9214c8c15fcff95ef97f290de454d7fa64244fce7a49729eadf1cbb7c"}, {0x10, 0x103, 0x48c}], 0x2a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000800)="61c0b9da3f58cadd53e005fda7208b36cde1015f76755a7e1a1d85850c8fa69752023be37f9ec0c7bc1f84159ce10abbbcef75604ba229a658446b4e58f9f634af8582ed48d071c9badbbd3c144d5d106741c87cf246d8e766df9764ce115da9050de6b76019a26420fb8732dae5f0d553256cd673945d909d7bddd84d348d0996f1df2245bd1a118f37503fc20eab2d56a88168c9d192114078022d75", 0x9d}, {&(0x7f00000008c0)="e43211f1482148398df153f9b31d9adddb5c2607d3e1075ad1bb5a63c999c1b7d3c7f84c482bb6fdace7f5cb7017f4ced14b7d4fe590c23550b3031227cf643a09ddc2b85234fdcf27cffd27e71eff50a46729bd9773083a7a6885afd57b19eb2936694de32b4ae1cc7164f887d03400", 0x70}, {&(0x7f0000000940)="95bc5296348243ee882280bc27a9d44cda72050ff53dab2618bf0e8cea62bd84bb5d14e5378632cd5f5b0fd1caf22d6f358df7dcad8474e6aa3ad8179085bc93a057fc0faa33ce91e7ec27244e8d1c3f4c17d9dd4bb2dc8bed33f105096678af7e055d41fbc2137662703f92c63d59053ef51368b1a9ce94bf579f6c9f05d2f8fd7fd13a1fa14dd3d2b116bc343cfcc7a3996a1c703590f6b808abdf4fa122a459a17f28dac1a7baa589c513158b9579c66bb232a51dceb5f8082ccd8dc9dade97ba069792f20fb4277fc98a3bdbf488ecb0550efc", 0xd5}, {&(0x7f0000000a40)="3bf1e802f70b22d3b00aa9f68a2b6f3935c8c0d3eb01c7d39f4c354fc32dd9728b588fd9e9156445430a0f294ac4a87f6ff274f38fb2c28077d78fa2d390eb589df054f48649f56062d7719bfe8c2f3c045d0c8e32", 0x55}, {&(0x7f0000000ac0)="6c5ff53dcf17a2ed49be0712b529b21037edd4ab0be4deb0027dd07579503f96d3f921da638b38cc3807785ef1308f7bb5c27258f8683762977dda89580ca15b2f1dc524fe1a462913437bfb4fb5b2b951e01fbac1f5151decb84dd31c2588c040cef19bf5fb5f89e8200f2723750578baea7252824fcdf5c5ca6654e45c88d9057243e448d549da948b7a9a663bf86bed5bc943cf21faa7022c9535637ea9fd2354d51726ca424e76352bf6e0e35d5d51bd43674e749e84ca07", 0xba}, {&(0x7f0000000b80)="291c131bd153e3837c7f69ec53639dae4727cea6815390217e883c3c241a47adb10eb08d6fc00dd631b974f086e743c4da301265079ac5f38693fe806d558efd630baeb396d541c2ce8a5724235d5d329a566451e0682fb7379c52c3c4d7f33ceb92fff46238b5777d48d738d2b1d1f93226d453258f565ca779c1eeb9c49f07c57d69edbbd16795a38e4f21a60ac4eb16915db84303fcaa31e7a584221545ed7c25e74749bccc3f35dcc057c4d0dd59d9b829173ddd9bcec38c467610445db440b4529093c8bd045fdabb29b6d06fba5c0c07de62b43fa65c4cac4bd41d40d7bf41366101c47a", 0xe7}, {&(0x7f0000000c80)="bafea299343b3676a77cf58ff4b9739e15008df15f33ddab01f6bcdab39cdf6b568d75e72efa09ce75b49bfa2ea52b3724f3b166792944c0ed3a59b3f9aef034814469f2a710888fa56b93065300e6e6e0f3b911221eb9621cc2bb1696604adcceef68704c9a1f37bbb95d8d606c3207bf1fe4f6485ef96df6b1872f2b5d90aa28ab529ec109a130d60a038c827920fcb8c9adc64084bcb39eabe3c862e6480017b243ad4ae8fd26df405f57d0f4c4e093ad2e343d", 0xb5}, {&(0x7f0000000d40)="fdbdae81d2134d1f31638c35ca6ea08d5dd51bf4c8b11de6de3d28394a2e98708b2239174127078fc54eee6e368e43bb6a1403ebc0253cc17238033f287c5cb83b24a487b259ed855ff0c7cf6cf58a79921680bb856f02bba2734b76b55ac4f7b7756e9084ef18fd863610b515d4395665eb690e5d026ad43021f3cacc8b82e3d3e8f87f4304ee05ccaf6d4ccdb421afae49049c831aa99737add99f5525ba85b2fa40ab2c1d43355d151eb0f2067c16b3da0522640bfecfa7d6cec15776b633528d0c4010dceb9cf3138282a59085c813", 0xd1}], 0x8, &(0x7f0000000ec0)=[{0x1010, 0x10c, 0x2, "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"}, {0x98, 0x88, 0x80000001, "44c18e4be5c324ae8d0f737eefa183a808c28e9351829350a4091a03d48a294e0bd59e94487fc3f241c7ebf367fd17d40507975be6ca5303142eff4e3880d12b4c30313c765e04bb57b68d78d74ef66eb79f1734474c0116cc2d980491b794cec281a31c6e1330d1f368011dc30772813078d3f6b5d456d4949ac45cb0c24865af873ec3314f44"}, {0xf0, 0x108, 0x8, "5723e125c5f92b60445c5c3b10f8ff8af23b07f899b62cd3e9aef0391931f1751f4c88e696f1c2653afca6fd3034e2901c63cdbb84ef70f19d4da53f19cd2a6674fd49a3ed05fb828a9ce963ea643c3d3f20f0901cdc8de3054959733e0825420c7df84fa34140009afb7af31f45b8e2d477b1fd12010a3106dcbc9a78e4c1dbcbd5a21222a9bd06632fc5c188d6ae2638cd10157d0f2d50c1913d241da53d0f671bc8d8bc71ea08ff8964dd5af6535294aee6306904cef37941f89b0f46c480742b05f314878e4a02499e5b7c0873fd7b1595c9415830d1ab9d431824c60ab0"}, {0x80, 0x29, 0x10001, "adce116db0f488d437acc696e1aea4e528859013fd9b0b4c0050b8f6c3526951c73f4b6bd4c8dcb7bdbdc507488099956bfd7f3b1ef1d975f8c854d9d58df7f86d633cd1cedb5996cf70163eac59b9bd1d806aaf215b753fc868b39a8b892fa3172942917790c6cf29"}, {0xe0, 0x105, 0x5, "f8aad2f72532b86cbb5445957e18969e28987a2487d6f8c6a29f254b35e0884fc3c5210acd896b2a15440932252cc3f249182d1a4bac228b8505f6610e075a18146a0ad2995b01b71484f4cdcd5b3b6581028cbf56a672d68ad83c5d88471ffb54a4995350ea86ad6fb4fda7630a978a850fbf11c917c2159dbe803840de2410358c0f67185d92fd3aebaf71ce4272d1e04fe6344f39bc42efbd9fc5c48081d418050cdb52273bc1f59630e624b654d1c04539116951bca76f843c2ab84735f6eb83080f28b9d38af3a04c12"}], 0x12f8}}, {{&(0x7f00000021c0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000002540)=[{&(0x7f0000002240)="b4a5c5912eeda304b002090a7b068330f2eee48cc58381e0acd622e068b0080a99b559b58cc9543d60354f220f061c82be34b1ca90db5f8b556a447eaeaf090bbe742160bb79985d009e45227b69c2186c2693dd8fbdfa5dc862ea484bf3572a674661d00750a8a41522ef594c72439858345b9bee76e9e4bc5edd670bd6807e72fefbdc6397e6737185522f7ccd0001cfcb55", 0x93}, {&(0x7f0000002300)="f4b7b44c70981f47cb72555ab1d23373d5c979cc8442c0168d4b48039c25e4278be3becc29d38f747f8239fb18bff1c023c44279227d1fbad4d368c7ec3c4457f52e3a368eccf56b7ad446ec4b2d25f0e006", 0x52}, {&(0x7f0000002380)="98a6c0ba33720118d25181e9a53691e464371734eb11eeafb129eece9d681ba25bfece", 0x23}, {&(0x7f00000023c0)="a92d99c9dbb33ae65ea7ee320196972d8df9318d153c78a3fe4073a8a7fc74de619110734a8f5c85e0cee48e0c8658a1af0d27c358303860e3613dec11ecdbda9aceb830", 0x44}, {&(0x7f0000002440)="0a5a570340fbd37239c79cd3a6f87095e851918e607535e8a1f70d30fae46c8197fc21fc76443e3c422a2b80cda6e3a43801f35c7fa275a816ec2383b25b5e881296d0880f041cc3c6f1d6231fd17c09fcbd7e96c5e239158a8374fc7e56fe5bce6f2e924a1a2fa1b553d63680e5dea067b29af62ecada0185c6bb6e656496ad9d7ed6aac53eb62978011a3c27cb0465e238ddf1d78df5ffe406fd1445e8067ec52af06377cbd1f0bf81693030e37e2491e502b3a6aae9143bf822ffeae530be5b08e067dc80a29561508580c0059ca9d11745cca486d3", 0xd7}], 0x5}}, {{&(0x7f00000025c0)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002640)="fcd1f31f0dc8cc8737dc0ffbce8d15ed13533461a8dca5a1809f2cfca5d4303fda1365d309c32bc6601e54615627d81c6b0a31f93f697fcf9efaad9afa4e21ccb6e61e300392c7fd70f4f5bb5c2c32380e7c80a20c88ae331d384ddefc4bb95f2758b94bf1d21d88ea5acf66e0192e446be706ca8a1c0da05ceb547c4d27fb147dbd", 0x82}], 0x1, &(0x7f0000002740)=[{0xe0, 0x11, 0x8, "9afe441aa6ccaf484c0081a21f064bd70833f0ad5378c53f86f5cd97808e1b82b9b153d1fd38a3ff4b5a95d831871ab17f4a496db17904161af45ca64d58bbc63cf1bab99127262c221053b714bf0eaa73377d85ff22b1540a5d4e8ccad7b533d7df5fe43b371f5b19422795c553635166632078cfb9751110e910bac23ab3ec0b13e1352a3641b4de75e78d38e99d2b7d08b6ae332f2538e94bae38f5d7590e179e810198d49f5a59545a4fe27792a07c1bac7ddaa13bdd5d302f0b20e489aba7ac85caad3c89eb68"}, {0x80, 0x105, 0x1000, "b4f96389cdebf07d0a8b22c3ba7f5bf947c5455650872d755e50af1796fd75663fc005ae986a1c4e60b9a892109eba40bf43caf5b20191bb6b900e029cf2a1994841575f382304547b64d4ea9e0378bd5895890677cbf1b7520b257e7630ea96e072b889cfcf925788867580ee"}, {0xa8, 0x10b, 0x0, "2733375b2def8bb0e85c0127b2e8ccc11c7856bb47f10e284a3ed8dacc0c788ab495db1b1610bd51bbc82d1e3f20403cdaad59e116915483f09b8a66d1925240eaa5b9d87df11694dcd42056efd698e6781e1a5b8686e91d8bb4d2bb9a3ad02ef9fa7402df2ee44da61fa8f537c1f3bcd22c333e9c5c44a538b83f23d545a1e9d567b90ba879a0a5d87609102245bc79ea46"}, {0xb0, 0x10f, 0x7, "e428f9e896513bcbfcd61f5265bd738ba674a4e8849d366d1a22c8f6b4cfbf8fa3a94604169d82865f782fcebdd386413be9a7bdede89ec91d7e1c94ae22f77475978602009f34c4fb42574e698f751e74614732d1d1804f91657cfa74b3ed131575234bdf7e839af33eb8f4e1467f307ddd5b8f3f91fdd25a7209317c97a44e27338bebc7684f5eee379f62a0107e5ecf9aa3f819cf1895cc6a"}, {0x108, 0x10b, 0x3ff, "5ed92c60fe06fdf5b2a45a2d39a099a56cf6c937aaa8bb02014366428daca686c88d93030be83f3c08dd18e8c79b05ae2e4be23f131f84c57ac1385e56b810357d9aa2bdd5135eaec9500de6ff64248853c51f89afcadc1a2ae7860ad3f5628771a8832e958502888243e69361efbfef60526a7dd8b8270418ccdf00c4865f173db388c7a0a297f0ad1dc0d3b567e99f482a33e443dc0b46beefeeb90560d27a4c31e58e388948a78680426088030c8cc2f87e7a9e51962ed5cc6efb8ebd90228098e68edbe33934b89cac7f9272ac992616ab91f8f8b4251074e27e6f17facf9fff6e4c14a37abeef04874a38df662c3c39fdf2"}, {0x70, 0x10c, 0x3, "4a25f5960bfc54789afc17514748674ffa4a6adfc8a63cb6d2a69c7e1124bf61d3d0019ae654e79204bd29b32c3203aa24fd420f7fa22c56271816d4e990737b30e1ca455ba091cee8b1e4bae2799b30666a17932bf640c5afe8"}], 0x430}}], 0x4, 0x1) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1b0000001d008105e00980ecdb4cb9f207c803a01c000000d00386", 0x1b}], 0x1}, 0x0) 07:06:00 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 295.255312][T10241] overlayfs: unrecognized mount option "./file0" or missing value [ 295.278215][T10234] overlayfs: conflicting lowerdir path 07:06:00 executing program 0: syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000300)="2140578be6620ad06cc22d55ab29342166e6ba", 0x13, 0x7}], 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x12c0440, 0x0) 07:06:00 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0xffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0xc1, 0x659, 0x8, 0x1000, 0x7, r2}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4201, 0x1) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x2, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r0, &(0x7f0000000280)="c4a384d64c57a95759a71fc96f0acab0408522b47b8c13dd26959dd177a2c6de4424cb645f1a4b31a058029e1f9064c2432304d1b05c5a6546ec67147384b30669f04042011fe87bc343e835", 0x4c, 0x2, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x959749fa112cae4a, 0x40, 0xffffffffffffffff, &(0x7f0000000300)="41b902d9887808c5314d1fde90dead446d1d10ca5c5462c46349aa18d894ed97ae96eaac7e66684242965d78e8e2a08572a0bbcdc6e4f85b6d770233d2d8d9372f891ffcebeed82f2645d5d9df9da3f1d2544d41b0ab86a6a9b92e726ab27347679f05147b1fb492a25bb094cc942228e2b872ca72e053069a9bb2a3b3bd4af35021bb2bbf03511fe9887e60c03b4b4de3603e45d94030088e7168e822af", 0x9e, 0x3}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r0, r0, 0x0, 0x8080fffffffe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="ff00000000000000204182200a0ff8f4b399ad1e2d678941a7d40000e90a39c5aaf5e7112f8969410a40757710888101cb36a243de7aef0768f751c8bfb607171fb22e694ad5fbbd6be2f9aadef6659a4069d56358"], 0x55) prctl$PR_GET_SECCOMP(0x15) 07:06:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040)) ioctl$KVM_SMI(r2, 0xaeb7) 07:06:01 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000240)={0xffff, 0xa99, &(0x7f0000000080)="19b9a9f5691bcf379f339eac75a7eb8fd78bd407044ff9eb2b5f7c36867d795eadbb9502a169f39782122b631d3a", &(0x7f0000000200)="348e048dcf5456e858dd7a3297bb0724b357", 0x2e, 0x12}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x486403, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x80000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000300)=0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xfffffffffffffdad) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x48}}, 0x0) 07:06:01 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x41, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200)={0x1, 0x101, 0x3, 0x7ff, 0x400}, 0x14) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x13d, 0x0, 0x20000000}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/175, 0xaf}], 0x3, 0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400000, 0x0) 07:06:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f000001d000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x31f15aae}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ba00000000000000009abbe90ff2f7e63b35110f3aca2446d728c7ff05c28bbbcad701650688326c890900e27f6e000000040000000000e3a9af80075c44a41a9b13897b2f3019f9a2a67b045836f5669cbd6d22931f4dca4ca7c38ff4652e7cf1d63d00dea503a108fb378d0c599d6c22dae9792fe76a3447ddb84d145ca16c2b7bafc0caec764c0f723554480f0b4f90b590350630e578370bcc3ecbec"], 0x1}, 0x1, 0x0, 0x0, 0x20040004}, 0x4040000) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) sendfile(r2, r5, 0x0, 0x80001d00c0d0) 07:06:01 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0xffff, {0xffffffffffffffff}, {r3}, 0x9, 0x4780}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66736e616d653d2a2476626f786e6574302d2c7569643cf067e41a318f4702192250f987d7c18759223903cc44ec3741b527b4fc365c6f040c424b49f36b9f080399d82bb38ec5de84dc1fcb3d5029b57cffb1fca5e50d453d9b71bae24ffd22bfcbb309ee70464d85862463393226fbcc70788ff8f05d4bd26ef48a8ffa39702cf0fb9a828002ff4a45afcc733da9055b443250ebbabee28c4e0de2671f8a95ca7f212c7d1f1fd42eec9a2824051cbbb4a02299e968b098e9893bcce2db0210a879ca30", @ANYRESDEC=r4, @ANYBLOB=',fowner=', @ANYRESDEC=r6, @ANYBLOB=',subj_type=ppp1lo#cgroupcgroupnodevmd5sum,\x00']) [ 296.039026][T10283] __ntfs_error: 15 callbacks suppressed [ 296.039038][T10283] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) sched_yield() 07:06:01 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) [ 296.210540][T10283] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:01 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$mouse(0x0, 0x0, 0x200100) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r3) r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000140)={0x3, 'caif0\x00', {0x5}, 0x1}) dup2(r0, r2) 07:06:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x5, 0x4) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0xfbeb, 0x9, 0x4, 0x0, 0x5, {0x0, 0x7530}, {0x4, 0x0, 0x9, 0x7, 0x0, 0x2f, "b16d6908"}, 0x2, 0x3, @userptr=0x80000000, 0x7ff, 0x0, r2}) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000580)={0x2, 0x1, 0x9, 0x18, 0x1d, &(0x7f0000000180)="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"}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:01 executing program 5: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000000)={0x0, 0xc, 0x4, 0x1000000, 0x0, {0x77359400}, {0x0, 0xc, 0x3f, 0x20, 0x3, 0x1f, "f494244a"}, 0x9503, 0x3, @fd=r0, 0x5, 0x0, r1}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="c4f47f103fa7"}, 0x14) bind$xdp(r5, &(0x7f0000000080)={0x2c, 0x0, r9, 0x16, r3}, 0x10) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) [ 296.501110][T10322] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 296.602415][T10322] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:02 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x400040) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8, 0x0, 0x8, 0x3ff, 0x80}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x424002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000000240)=""/226, 0xe2}], 0x3, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:02 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x6c, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @rand_addr="f620177b4a06717ac19ffe9fbec5853a"}}, {0x20, 0x2, @in6={0x2, 0x0, 0x0, @remote}}}}]}]}, 0x6c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) 07:06:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="ad9d531122540782ef2ddd37ea748283114cdb27c7e76a2e13c3ffb3bfd783de12f1f827d273ddf8689ef7e38ea36836eef711c670022370812720ffa9d95c66cb78d8380c4079577367db3059da9d5831021f0196427da407f80bddb8eca743122fef481d8f6eb172fe2166062650524acef2cd5327f84e4b344c0d8f2f00bff4126f1a657b71a061333bdf4add79e1c3d0646cf06e6ac6c37ef7b1367a094f0fbc9025dd6a7dfd9a0c29101642567313d45bd7fc8b696cb3d8503ab6d4b0593eaf91fa697eaeae5de6b3476112e19567636bfb6d4362dd8646a26ea50858c70ffc222ef33ad3f200a1ae647d0c4b0860c090a6faac76041197b61bbff54b6a") r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$mouse(0x0, 0x0, 0x200100) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) syncfs(r3) r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000140)={0x3, 'caif0\x00', {0x5}, 0x1}) dup2(r0, r2) 07:06:02 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x48, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:02 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x204102, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000100)="862dffa33b14b23428c138a688380f27b90e70d296d19de51de19839009b52c1fe11ac2dc0912155646576e75af7f54ae258366f8ae2fad0d7900b84a920ca6d64047dc89135b3b7d28f6d898c04720d0f58d904035df25d2f4441221592c00951bf82f2dc0d9a523800", &(0x7f0000000180)=""/226, &(0x7f0000000280)="fd9ab9326adaa5c97e620005dfb149184c85ff8b83514d42d0b7", &(0x7f00000002c0)="107005a8720e95eca891beea1ff1b17d0e0d7cf7ad46419d0968f2308aaa388a1be34c5bd1d820d3bcd56bb173de21e5a56856d03a0a8ecf1582bcee55f6639fb65464292114706de42f73654bf9c9b271318ad7085c364170d3b445562e41a95a", 0x9, r1, 0x4}, 0x38) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 297.125523][T10349] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 297.126163][T10354] tipc: Started in network mode [ 297.147423][ T27] audit: type=1804 audit(1585551962.645:31): pid=10355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir086846240/syzkaller.xb6NUi/47/bus" dev="sda1" ino=16018 res=1 [ 297.193430][ T27] audit: type=1804 audit(1585551962.655:32): pid=10355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir086846240/syzkaller.xb6NUi/47/bus" dev="sda1" ino=16018 res=1 07:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) [ 297.226518][ T27] audit: type=1804 audit(1585551962.655:33): pid=10355 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir086846240/syzkaller.xb6NUi/47/bus" dev="sda1" ino=16018 res=1 [ 297.251754][T10354] tipc: Own node identity , cluster identity 4711 [ 297.260397][T10354] tipc: Failed to set node id, please configure manually [ 297.271386][T10354] tipc: Enabling of bearer rejected, failed to enable media [ 297.272674][T10349] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 297.295455][T10359] tipc: Started in network mode [ 297.310545][T10359] tipc: Own node identity , cluster identity 4711 [ 297.376133][T10359] tipc: Failed to set node id, please configure manually [ 297.416693][T10359] tipc: Enabling of bearer rejected, failed to enable media 07:06:03 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:03 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan0\x00', 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) recvfrom$inet(r1, &(0x7f0000000300)=""/138, 0x8a, 0x10103, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x49521}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x18912, &(0x7f0000000180)="080db5055e0bcfe847a071") 07:06:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="ad9d531122540782ef2ddd37ea748283114cdb27c7e76a2e13c3ffb3bfd783de12f1f827d273ddf8689ef7e38ea36836eef711c670022370812720ffa9d95c66cb78d8380c4079577367db3059da9d5831021f0196427da407f80bddb8eca743122fef481d8f6eb172fe2166062650524acef2cd5327f84e4b344c0d8f2f00bff4126f1a657b71a061333bdf4add79e1c3d0646cf06e6ac6c37ef7b1367a094f0fbc9025dd6a7dfd9a0c29101642567313d45bd7fc8b696cb3d8503ab6d4b0593eaf91fa697eaeae5de6b3476112e19567636bfb6d4362dd8646a26ea50858c70ffc222ef33ad3f200a1ae647d0c4b0860c090a6faac76041197b61bbff54b6a") r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x200100) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x9, 0xffffffff}]}, 0xc, 0x2) syncfs(r2) r3 = accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x3, 'caif0\x00', {0x5}, 0x1}) dup2(r0, r1) 07:06:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x6, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000180)="ca5842110875cbcd9ec294fc3d202c0a26e7207624c37f6d2ba13b4cc723f8fc22cada3351b5277fe060b24f7b8c640845b695e1c6eff3251f794c7a78fe7694f47d12d06e682f63c646e2b7d23f2f691b512e71cb5e24ec203f8deabeecd6cb800abeb4133283445324353fb3d8", 0x6e}], 0x1) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000480)=0x3f) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x20, 0x0, 0x20, 0x0, 0x4, 0x44000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0x4}, 0x204, 0x1, 0xf021, 0x6, 0x3, 0x9, 0x6400}, 0x0, 0x2, 0xffffffffffffffff, 0x4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x3, 0x1, 0x4, 0x30, 0x7, {}, {0x3, 0x8, 0x9b, 0x2, 0x4, 0xf8, "ce076eb4"}, 0x81, 0x4, @userptr=0x1, 0x7ff, 0x0, r4}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x80000001, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x1f, 0x3, 0x3f, 0x1, 0x0, 0x65a, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240)}, 0x200, 0x7fffffff, 0x0, 0x7, 0x200, 0x4, 0x7f}, 0x0, 0xb, 0xffffffffffffffff, 0x0) 07:06:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) [ 297.653802][T10386] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:03 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:03 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x7, 0x1, 0x1, {0x1, 0xffff, 0x2, 0x9bcf}}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x440000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getpid() pipe(0x0) unshare(0x40000000) 07:06:03 executing program 0: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan0\x00', 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket(0x200000000000011, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) recvfrom$inet(r1, &(0x7f0000000300)=""/138, 0x8a, 0x10103, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x49521}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x18912, &(0x7f0000000180)="080db5055e0bcfe847a071") 07:06:03 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x60, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000002c0)="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") r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x200100) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_capability(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x9, 0xffffffff}]}, 0xc, 0x2) syncfs(r2) r3 = accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x3, 'caif0\x00', {0x5}, 0x1}) dup2(r0, r1) 07:06:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r5, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000000)=0x5a8356036fd82edc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x82, &(0x7f00000000c0)={r7}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={r7, @in={{0x2, 0x4e24, @broadcast}}, 0x3}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e20, 0x3, @rand_addr="323f5b80026e974ac929d235728402fa", 0x6}}, 0x8, 0x2}, 0x90) [ 298.568247][T10408] IPVS: ftp: loaded support on port[0] = 21 07:06:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) r1 = syz_open_dev$mouse(&(0x7f0000003c00)='/dev/input/mouse#\x00', 0x9, 0x4000) sendmsg$AUDIT_GET(r1, &(0x7f0000003d00)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003c80)={0x10, 0x3e8, 0x4a5, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x80001) 07:06:04 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x68, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:04 executing program 0: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000080)="beaca9cf64639fba66971ae25d323a7991ed31816694b520fb1df43f20030d80e6672e8cac0b8448d4843e4714cb6523479a6e00834f48ac7ba1") close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, r3, 0x0, 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:'}, 0x19, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f0000000200)={0xfba78db8, 0x4, &(0x7f0000000140)=[0xfffa, 0x7, 0x4, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x8], &(0x7f00000001c0)=[0x40, 0x1000, 0x20, 0x100, 0x0, 0x4, 0x20, 0x5]}) 07:06:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x7cd, 0x0, 0x81, 0x7}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x3, 0x2}, 0x10) recvfrom$rose(r2, &(0x7f0000000040)=""/218, 0xda, 0x40000000, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) 07:06:04 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 299.165470][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.214151][T10408] IPVS: ftp: loaded support on port[0] = 21 07:06:05 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:05 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x3a000, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x44}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x20}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x4, "ce263c65"}, &(0x7f0000000200)=0x28) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x154ab, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000050774000000dfdbdf250001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000900010005000a0005403d0000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a040000003723262ef140a544bdf8e868047edb1f839fd0db3e855e9b9c3c4f3d85375cfa53566d1becb85f7297cb072cd567309e4d718ff2d41485c9b6a83c954f22f55716d40a207530362bc729067a2c1827fb817eec56022b28c425b3226505697425271b24a7a00c7f44d83d98fd505c6a5b12080000000000009f14228e070000000000000019c76d2aad58f70697ea9848d46981d1287975eba5d703500b6be61016afab52dc2ebf96c466bd748fd5d49ec76b49abd15d813c09a08ab84aa2ebc19272495061b8ff447242d32b20b2", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a53779861026cd4f7ae2dcfdaef81c581d1b4223e49887ee68c165be3eb34c5174f62792778f819be8f44615f16e18d843f137456b54921f664921dc615264cceb9ca92da732cc5b460a46383502d39192ed1257af1867305485dc560b67fa9950386e7d44374265b739aa0ef8918e45deb997440644b95e437e5d5f0500000000000000006cf3000000000000000000000000000000009e5bf38042027eaa6a9a43e021a4f5db674de6b8cb5e4b0475d8e53c6302ff35acb062cdaadb6ef4b5669a533538381ba576b4d4e64615db7c28d166bf0c526978bc13efc8d65df345e16649ce237f392bf38cedfe349982147d18390414d4c0012e88c7295716e13f498cf01b92c6ecfcb20ceedc016e54d8ba30267f087e2f7c804004f3271f4b50b3d9aada7928751eaea679bfa6eb9ce1415342c052cffeee788a2ac82f5559557bf972cd606336de5c4ae35b0d68aaf36e601a2f5a8d1481b93dc44c197774d42524d13142e5cb7211c3168174de72f997e22e15b1c965fce7db579456f9a05a0c029344b9d6ae8129463917f705520eec88e5b07d6c55cf0b23f5dedba1522c65f555275d9e78a591be4077d0e1879d148e07830ab6d8"], 0x50}}, 0x0) 07:06:05 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) splice(r3, 0x0, r5, 0x0, 0x1ffe4, 0x0) 07:06:05 executing program 3: gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x57, 0x0, 0x3, 0x8, 0x1, 0x0, 0x41c7, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x30000, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000000, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'macsec0\x00', {0x2, 0x4e23, @local}}) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)=0xffffdb53) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:05 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x7, 0x1, 0x1, {0x1, 0xffff, 0x2, 0x9bcf}}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x440000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getpid() pipe(0x0) unshare(0x40000000) 07:06:05 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x74, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 299.571009][T10516] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 07:06:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200003}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x20e7f476) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r1, r1, 0x0, 0x80001d00c0d0) [ 299.612680][T10512] IPVS: ftp: loaded support on port[0] = 21 [ 299.617193][T10516] device macsec1 entered promiscuous mode 07:06:05 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)) 07:06:05 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x7a, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x42d6bf34c6d337a5, 0xfff7fffd) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x100040000000800, r1, &(0x7f0000000040)=0xd, 0x20000000200007, 0x8) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r4, 0x0, r3, 0x0, 0x80000001, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xffcffff, 0x7, 0x7, r6, 0x0, &(0x7f0000000100)={0x9b0962, 0x7ff, [], @p_u32=&(0x7f00000000c0)=0x9e8}}) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0xffff) pipe(&(0x7f0000000000)) getsockopt$inet6_mreq(r2, 0x29, 0xf, &(0x7f0000000040)={@empty}, &(0x7f0000000200)=0x4) 07:06:05 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 300.405252][T10573] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 300.421746][T10573] device macsec1 entered promiscuous mode 07:06:06 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r4, 0x0, r3, 0x0, 0x80000001, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xffcffff, 0x7, 0x7, r6, 0x0, &(0x7f0000000100)={0x9b0962, 0x7ff, [], @p_u32=&(0x7f00000000c0)=0x9e8}}) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0xffff) pipe(&(0x7f0000000000)) getsockopt$inet6_mreq(r2, 0x29, 0xf, &(0x7f0000000040)={@empty}, &(0x7f0000000200)=0x4) 07:06:08 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) splice(r3, 0x0, r5, 0x0, 0x1ffe4, 0x0) 07:06:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x5, 0x4) 07:06:08 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x7, 0x1, 0x1, {0x1, 0xffff, 0x2, 0x9bcf}}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x440000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getpid() pipe(0x0) unshare(0x40000000) 07:06:08 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r4, 0x0, r3, 0x0, 0x80000001, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0xffcffff, 0x7, 0x7, r6, 0x0, &(0x7f0000000100)={0x9b0962, 0x7ff, [], @p_u32=&(0x7f00000000c0)=0x9e8}}) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0xffff) pipe(&(0x7f0000000000)) getsockopt$inet6_mreq(r2, 0x29, 0xf, &(0x7f0000000040)={@empty}, &(0x7f0000000200)=0x4) 07:06:08 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) [ 302.586431][T10613] __ntfs_error: 15 callbacks suppressed [ 302.586443][T10613] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 302.676254][T10617] IPVS: ftp: loaded support on port[0] = 21 07:06:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x54, 0x6, 0x0, {0x0, 0x0, 0x2b, 0x0, '/sys/kernel/debug/bluetooth/6lowpan_enable\x00'}}, 0x54) 07:06:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x8a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x80000001, 0x0) fcntl$dupfd(r5, 0x605, r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000100)={0x6, "7459727dd57b1ff04d679d0431e282c35452040e8be2b766c2b30d60fc506638", 0x0, 0x1}) [ 302.796199][T10613] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 302.840696][T10622] ntfs: (device loop0): parse_options(): The umask option requires an argument. 07:06:08 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:08 executing program 1: syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000000140)="8b4e54465320202020", 0x9, 0x2}, {0x0, 0x0, 0x1ff}], 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x880, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x3, 0x4, 0x0, 0x8}) [ 303.118617][T10662] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 303.185828][T10662] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 303.195567][T10670] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. 07:06:08 executing program 5: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x7, 0x1, 0x1, {0x1, 0xffff, 0x2, 0x9bcf}}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x440000, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x339, 0x0, 0x4, 0x1, 0x34, @multicast}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getpid() pipe(0x0) unshare(0x40000000) [ 303.233951][T10670] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 303.255266][T10670] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume. [ 303.262937][ C1] [ 303.262942][ C1] ===================================== [ 303.262944][ C1] WARNING: bad unlock balance detected! [ 303.262951][ C1] 5.6.0-rc7-syzkaller #0 Not tainted [ 303.262953][ C1] ------------------------------------- [ 303.262958][ C1] syz-executor.1/10670 is trying to release lock (rcu_callback) at: [ 303.263089][ C1] [] rcu_core+0x597/0x12d0 [ 303.263099][ C1] but there are no more locks to release! [ 303.263107][ C1] [ 303.263107][ C1] other info that might help us debug this: [ 303.263117][ C1] 1 lock held by syz-executor.1/10670: [ 303.263124][ C1] #0: ffff888048e1a0d8 (&type->s_umount_key#54/1){+.+.}, at: alloc_super+0x152/0x910 [ 303.263178][ C1] [ 303.263178][ C1] stack backtrace: [ 303.263188][ C1] CPU: 1 PID: 10670 Comm: syz-executor.1 Not tainted 5.6.0-rc7-syzkaller #0 [ 303.263194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.263197][ C1] Call Trace: [ 303.263202][ C1] [ 303.263220][ C1] dump_stack+0x188/0x20d [ 303.263234][ C1] ? rcu_core+0x597/0x12d0 [ 303.263253][ C1] lock_release+0x586/0x7c0 [ 303.263264][ C1] ? lock_downgrade+0x7f0/0x7f0 [ 303.263278][ C1] ? lockdep_unregister_key+0x490/0x490 [ 303.263292][ C1] rcu_core+0x5b7/0x12d0 [ 303.263307][ C1] ? __rcu_read_unlock+0x700/0x700 [ 303.263345][ C1] ? sched_clock_cpu+0x18/0x1b0 [ 303.263360][ C1] ? clockevents_program_event+0x134/0x350 [ 303.263375][ C1] __do_softirq+0x26c/0x99d [ 303.263413][ C1] irq_exit+0x192/0x1d0 [ 303.263427][ C1] smp_apic_timer_interrupt+0x19e/0x600 [ 303.263441][ C1] apic_timer_interrupt+0xf/0x20 [ 303.263449][ C1] 07:06:08 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 303.263487][ C1] RIP: 0010:console_unlock+0xba7/0xf00 [ 303.263505][ C1] Code: 89 48 c1 e8 03 42 80 3c 38 00 0f 85 ea 02 00 00 48 83 3d fb 0d 18 08 00 0f 84 96 01 00 00 e8 50 7e 16 00 48 8b 7c 24 28 57 9d <0f> 1f 44 00 00 e9 6b ff ff ff e8 3a 7e 16 00 c7 05 f0 6b e2 0a 00 [ 303.263515][ C1] RSP: 0018:ffffc9000664f9c0 EFLAGS: 00000212 ORIG_RAX: ffffffffffffff13 [ 303.263532][ C1] RAX: 0000000000040000 RBX: 0000000000000200 RCX: ffffc90005129000 [ 303.263542][ C1] RDX: 0000000000029ace RSI: ffffffff815ba6d0 RDI: 0000000000000212 [ 303.263551][ C1] RBP: 0000000000000000 R08: ffff8880947e6100 R09: fffffbfff12f4371 [ 303.263561][ C1] R10: fffffbfff12f4370 R11: 0000000000000001 R12: ffffffff84a20450 [ 303.263571][ C1] R13: ffffffff89f55fb0 R14: 0000000000000054 R15: dffffc0000000000 [ 303.263602][ C1] ? netconsole_netdev_event+0x2a0/0x2a0 [ 303.263617][ C1] ? console_unlock+0xba0/0xf00 [ 303.263637][ C1] vprintk_emit+0x2a7/0x710 [ 303.263652][ C1] vprintk_func+0x79/0x17e [ 303.263665][ C1] printk+0xba/0xed [ 303.263678][ C1] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 303.263694][ C1] ? trace_hardirqs_on+0x55/0x220 [ 303.263707][ C1] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 303.263719][ C1] ? ___ratelimit+0x59/0x573 [ 303.263761][ C1] __ntfs_error.cold+0x91/0xc7 [ 303.263775][ C1] ? __ntfs_warning+0x160/0x160 [ 303.263789][ C1] ? __wait_on_bit+0x190/0x190 [ 303.263835][ C1] ? var_wake_function+0x140/0x140 [ 303.263850][ C1] ? ___might_sleep+0x15a/0x2b0 [ 303.263897][ C1] ntfs_fill_super+0x1aa1/0x3080 [ 303.263914][ C1] mount_bdev+0x305/0x3c0 [ 303.263925][ C1] ? load_system_files+0x7550/0x7550 [ 303.263935][ C1] ? ntfs_rl_punch_nolock+0x1da0/0x1da0 [ 303.263970][ C1] legacy_get_tree+0x105/0x220 [ 303.264007][ C1] ? ns_capable_common+0xe2/0x100 [ 303.264020][ C1] vfs_get_tree+0x89/0x2f0 [ 303.264034][ C1] do_mount+0x1306/0x1a60 [ 303.264047][ C1] ? copy_mount_string+0x40/0x40 [ 303.264084][ C1] ? _copy_from_user+0x123/0x190 [ 303.264097][ C1] __x64_sys_mount+0x18f/0x230 [ 303.264113][ C1] do_syscall_64+0xf6/0x7d0 [ 303.264127][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.264138][ C1] RIP: 0033:0x45f29a [ 303.264151][ C1] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 303.264160][ C1] RSP: 002b:00007f0dbb347a68 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 303.264178][ C1] RAX: ffffffffffffffda RBX: 00007f0dbb3486d4 RCX: 000000000045f29a [ 303.264187][ C1] RDX: 00007f0dbb347ae0 RSI: 0000000020000100 RDI: 00007f0dbb347b00 [ 303.264197][ C1] RBP: 000000000076bf00 R08: 00007f0dbb347b40 R09: 00007f0dbb347ae0 [ 303.264206][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 303.264216][ C1] R13: 0000000000000be7 R14: 00000000004ce08e R15: 000000000076bf0c [ 303.450096][T10683] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 303.480113][T10682] IPVS: ftp: loaded support on port[0] = 21 [ 303.822047][T10683] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 305.290004][ T0] NOHZ: local_softirq_pending 08 [ 305.447076][ T144] tipc: TX() has been purged, node left! 07:06:11 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:11 executing program 3: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x1ff, 0xc, 0x4, 0x40000000, 0x2, {0x77359400}, {0x2, 0x0, 0x2, 0xff, 0x2, 0x9, "4e354f86"}, 0x2a53, 0x3, @planes=&(0x7f0000000080)={0x6, 0x8000, @userptr=0x5, 0x8000}, 0x34, 0x0, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="cf2af50c116e351907ef022c3128d6c3867209fca9a5d9929c35189bdd88b4086842663709b16e3841ebec84549f0e10889b91", @ANYBLOB="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", @ANYPTR], 0x0, 0x11f}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x80000001, 0x0) 07:06:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) splice(r3, 0x0, r5, 0x0, 0x1ffe4, 0x0) 07:06:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 07:06:11 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0xfffffe2a) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:11 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 305.613656][ T144] tipc: TX() has been purged, node left! 07:06:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 07:06:11 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x95c, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) [ 305.768582][ T144] tipc: TX() has been purged, node left! 07:06:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 07:06:11 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0xfffffe2a) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 305.957983][ T144] tipc: TX() has been purged, node left! 07:06:11 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x95d, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 07:06:12 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 07:06:14 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xff01) splice(r3, 0x0, r5, 0x0, 0x1ffe4, 0x0) 07:06:14 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:14 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0xfffffe2a) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:14 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(r3, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r4, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 07:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x220a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r3, 0x1, 0x8000, 0xfffff000}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 308.711414][T10811] __ntfs_error: 9 callbacks suppressed [ 308.711427][T10811] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 07:06:14 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0xfffffe2a) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 308.844655][T10811] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 308.881439][T10818] ntfs: (device loop0): parse_options(): The umask option requires an argument. 07:06:14 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5, 0xfffffffffffffffe, 0x5, 0x7fffffff}, 0x5}, 0x20, 0x1, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) 07:06:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40000000}, 0x8) [ 309.067078][T10847] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove [ 309.131206][T10847] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xff01) 07:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4001, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x400, 0x8001, 0x8002, 0x0, 0x80, 0x2, 0x9, 0x3}, &(0x7f0000000240)=0x20) 07:06:17 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x1f00, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:17 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) semop(0x0, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(0x0, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r3, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)) [ 311.772830][T10879] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) epoll_create1(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) 07:06:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=r5, @ANYRES16=r7], @ANYRESOCT=r8, @ANYRES16, @ANYRESHEX=0x0], 0x3b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, r0, 0xb) r9 = socket$inet6(0xa, 0x400000000001, 0x0) close(r9) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x80001d00c0d0) [ 311.836242][T10879] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:17 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) epoll_create1(0x0) 07:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x2, 0x0, 0x0, 0x5, 0x6}, &(0x7f0000000080)=0x20) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) [ 311.958253][T10890] ntfs: (device loop0): parse_options(): The umask option requires an argument. 07:06:17 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) 07:06:17 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) [ 312.051924][T10904] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x80000001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) 07:06:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) [ 312.177296][T10904] ntfs: (device loop2): parse_options(): Invalid errors option argument: recove 07:06:18 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) stat(0x0, &(0x7f0000001400)) r2 = socket$nl_generic(0x10, 0x3, 0x10) semop(0x0, &(0x7f0000000040)=[{0x0, 0xfeff}], 0x1) semop(0x0, &(0x7f0000000380)=[{}, {0x4, 0xffff}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x4, 0x9}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r3, 0x1}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 07:06:18 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0xc9}, 0x8) splice(r1, 0x0, r2, 0x0, 0x80000001, 0x0) r4 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x28cc0, 0x20) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d0) 07:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:06:18 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25050000000c000300819300000000000090f29d013346d78d92d269e4bb14e234a3fa292356174a7a1f83e79a1399f114658cf6c825a1eba8758e1fc614502a9e06f54cd7d1ab09db4fd09414a317d6d85f9ba4e8310f8276c357fde8b8ad3bfa9b99d4480e8f63bcfd9b7526d58a8c900b63c1121d140c3d0a55e9aecd44f0b25c90ed5b931e3974011aface4f40cf954383"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask'}}, {@dmask={'dmask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@disable_sparse_no='disable_sparse=no'}, {@uid={'uid'}}, {@umask={'umask'}}]}) 07:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) epoll_create1(0x0) 07:06:18 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:18 executing program 2: syz_mount_image$ntfs(&(0x7f0000000280)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x3f00, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@errors_recover='errors=recover'}]}) 07:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc43, 0x83}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) 07:06:18 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 07:06:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001640)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/194, 0xc2}], 0x3) finit_module(r0, &(0x7f0000000000)='cgroup\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)