, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000013, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000c10100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1373.056335][T11252] overlayfs: unrecognized mount option "u" or missing value 00:37:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000ff0100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1373.276313][T11252] overlayfs: unrecognized mount option "u/file0" or missing value [ 1373.376504][T11253] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1373.429613][T11253] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 00:37:11 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3d, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000000)={0x8, 0x72, 0x400, 0x4, 0x6}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:11 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x1, 0x80, 0x0, 0xff, 0x0, 0x2, 0x1, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x48a, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x80c7, 0xdb, 0x4, 0x9, 0x2, 0x3, 0x5, 0x0, 0x2, 0x0, 0x368000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="007775b7a08322be2e16e50fc8113df63337070142b9244f4e2e589d4d2962169c83b96b9faa769e883d91eb8514766ec8ec4842f048d53e8226b13a8a47f4e32b2c6b5a6894854f92bf5896e58ef5206cfa5a71b475959e6151065493cf5a2a106c9298cc0132d4f469a1"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) open(&(0x7f00000000c0)='./file2\x00', 0x601, 0x123) 00:37:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000018, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:37:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000c10100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:37:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600200000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000022, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1373.862029][T11285] overlayfs: unrecognized mount option "u" or missing value 00:37:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1374.016611][T11285] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600300000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:13 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='e']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000000c0)='./bus\x00'}, 0x10) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00382091bbed3c3ea55c19a912936d7a5a43fcb97453de71cb8f3cdc54ee22449bbca0dbca15c3cba1e2a782aad8cb2a16a6b4ca44677afbc03b000000000060014d16b7862416b3da1f1db31298c1a25a31d9b392453e6b0e975a3c5f294c52d4be6e8e861a6f065508ff6dafa81933db6b8214c81d9a58b033b09c1fe5cfd7ab90ebb7d605250dd99262c80600eded4d14722dc0300a9438ed463714acf2d305a5b048cb0e2d8cf7ab55dab3d730200e0dd7a149ab0e260951fbd2e48384dcf9f505f7fb3ef289b88390cf2917ff0ed28f2e9375d46482def8c5c1a90e16fb9af4"]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000033, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600400000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1375.248182][T11328] overlayfs: unrecognized mount option "e" or missing value 00:37:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600500000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1375.431540][T11335] overlayfs: unrecognized mount option "e/file0" or missing value 00:37:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000003e, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:13 executing program 2: r0 = getpid() r1 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r1, 0xffff, 0x100011) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x100000001, &(0x7f0000000140)="d7d656d52f68d4f99567ca7b3dfec4eedf323ea664d2550c18888ed93bdc95edb9f73bc07a1b1543337cc8ffb3048f70976aff63a4c3dab36373a48b787467adf6f4c2c7c72370cbb15c2a8eb0c1d7c59c94af80486c4371c1c2c6fc7e5a9d600e7d0cf1c910be716d9ca1ec546d7a2664cabcdfb159e9fe86a60d49bff3ad445a") syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd4, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x16) 00:37:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600600000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1375.699587][T11357] overlayfs: unrecognized mount option "u" or missing value [ 1375.887749][T11362] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:14 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="64660f5935f20f1bc666b92f0800000f320f0d4200ea00280b01640f01c4660f320f0135668e95cd00660f3880760b", 0x2f}], 0x1, 0x1, &(0x7f00000002c0)=[@cr4={0x1, 0x4080}], 0x1) r4 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010001000100000018000000", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653000"]) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x18002, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="7db4f30fc7b3190066b9800000c00f326635000400000f3000aab8007a000a980000ba4000b80000ef66b99e0900000f32f30f09ba4300ed", 0x38}], 0x1, 0xc, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}, @cr0={0x0, 0x80010011}], 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/vxlan', 0x501000, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x800000, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 00:37:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600700000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20001d4c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:14 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600800000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20002ee0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:14 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x40, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcad, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffc}, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)=ANY=[@ANYBLOB]) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600900000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1377.036402][T11406] overlayfs: unrecognized mount option "u" or missing value [ 1377.084898][T11410] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r5 = fcntl$dupfd(r1, 0xc0a, r1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="263e2e0fdea217aa6690640f320f070f01cb650fc78d0068ce2ea3af0007640fc71b", 0x22}], 0x1, 0x44, &(0x7f00000001c0)=[@cr0={0x0, 0x10}, @flags={0x3, 0x1044}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x2, 0x200000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0xfffffffffffffffe) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 00:37:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, 0x0, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600a00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20003a98, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:16 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = fork() sched_setattr(r2, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) r3 = getegid() setgroups(0x2, &(0x7f0000000180)=[r3, 0x0]) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="c2c6a4a07274e8bac4eb4c3126bffe0175e6c252361a3b0bf48a7470ac22c82aaa7d42b953c8103d3668d3120552290ddd511c22f74118792c5632a3307cff19949206ee70076650a1311b744457ca63d2e8cae766831255eed742ad4db0db040c474b4ea25b4c6cf347d81e622b95677c95942c000fb0ac2a52", 0x7a}, {&(0x7f0000000240)="1998e7f61f95841496ffcce09048774536258f51b0c55cd2d1f2e68e83f83ff61b006738496f7f9c39908e85f5dd4ce8fa21985f7988c5adf511ec58b10702f5f322487760d237f9256fb0443176bb48a2a9697db4ecd7fcb0f319473585dfd0fc86a057f95a05f107a32d557530bac03d814c84501156da96cd4937b992a50310d2ad9c6a476650e472f580cd4e71fea3688bf4b2f6e8e05458846d6518345ac20d262328f13c1261e714f4265e91b69d57d38feb7d7aebf95a0544f4948a389b3785bf0992cc838d146d54a0ff9943bea381d699c612a176507d52afdb19f5b70a5397dfe44bcae75699843ca55ad66cd813a6", 0xf4}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}], 0x20, 0x8000}, 0x88d8) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600b00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1378.566177][T11428] overlayfs: unrecognized mount option "u" or missing value 00:37:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, 0x0, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1378.710566][T11435] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:16 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600c00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1379.037683][T11456] overlayfs: unrecognized mount option "u" or missing value [ 1379.154601][T11463] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x2, 0x10000, 0x2000, &(0x7f000000b000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, 0x0, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600d00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20007530, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:19 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x48bb}, r0, 0x4, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)=ANY=[@ANYBLOB='#']) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600f00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1381.415360][T11481] overlayfs: unrecognized mount option "u" or missing value 00:37:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x2, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1381.570124][T11493] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:19 executing program 2: r0 = getpid() r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x9, 0xb6454f76fa56b328, 0x7, 0x7, 'syz1\x00', 0x656}, 0x2, 0x10000000, 0x0, r2, 0x4, 0x1, 'syz0\x00', &(0x7f0000000140)=[',\x00', ':$$\xeb\x00', '@\x00', '\x00'], 0xa, '\x00', [0x40, 0x2, 0x3, 0xd3e]}) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000601000000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1381.845704][T11510] overlayfs: unrecognized mount option "u" or missing value [ 1381.976145][T11510] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:20 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8400b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fork() sched_setattr(r3, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3bcd2146) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0f08660f38f8250f213fd9e9baf80c66b8e4f0f38866efbafc0c66ed0f01c3f08705baf80c66b8f8f0828d66efbafc0c66ed66b9cc0200000f32baf80c66b8d031998d66efbafc0c66b87200000066ef", 0x50}], 0x1, 0x10, &(0x7f0000000240), 0x0) r5 = dup3(r1, r4, 0x0) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xfa, 0x7, 0x7f, 0x0, 0x0, 0x1, 0x210, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1821, 0x0, @perf_config_ext={0x8001, 0x2}, 0x110, 0x3, 0x1f, 0x7, 0xfffffffffffffffd, 0x3f, 0x5, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r5, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000601100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x3, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:20 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) connect(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @empty}, 0x4, 0x3, 0x2, 0x1}}, 0x80) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000601300000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1382.630196][T11538] overlayfs: unrecognized mount option "u" or missing value 00:37:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x4, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1382.737512][T11547] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000601400000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:20 executing program 2: r0 = getpid() r1 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000003c0), 0x10000, 0x298203) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x6, 0x20, 0x0, 0x8000, 0x84808, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x2, @perf_config_ext={0x80000004, 0x2}, 0x0, 0x1000, 0x8, 0x0, 0x9, 0x7f, 0xd2, 0x0, 0xd1, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r1, 0x9) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) syz_mount_image$vxfs(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', 0x7fff, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="bac3b1b15c27f973a9aa444bbcc3d891dfaeab2fb8fffa6d405c8ef70470a5fed60d551034790d04e952af30ea5a1382226e58fb89b51d83a75556ac800ee49cdd050acc51f4b48f29989bc47bea358579a3ec45ff1f71c0f54c09a68d7a031ee324e9bf0f98b4f26a4171d94e7d8540714cf60a915089bee87834a96b9234d075de07fe33debcde0d17ba389bb29e8a4c4bedfab9ea3c89eb7d2fea8aad85d8e4407ce16b47e85c6cb1cade3c2a60e816de92", 0xb3, 0x401}], 0x1307010, &(0x7f0000000300)={[{'overlay\x00'}, {}, {'cramfs\x00'}, {'&)'}, {'#(!'}, {'overlay\x00'}, {')/'}, {'cramfs\x00'}, {}], [{@fsname={'fsname', 0x3d, '^},'}}, {@context={'context', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}) r3 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) [ 1383.116469][T11566] overlayfs: unrecognized mount option "u" or missing value [ 1383.303636][T11568] overlayfs: unrecognized mount option "u/file0" or missing value [ 1383.381604][T11545] KVM: debugfs: duplicate directory 11545-5 [ 1383.486222][T11545] debugfs: Directory 'vcpu0' with parent '/' already present! 00:37:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x5, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000602500000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:21 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0xfff, 0x40, 0x5, 0x3, 0x77, 0x6, 0x0, 0xf8, 0x4, 0x9, 0x80, 0x29, 0x3}, {0x400, 0x6, 0x81, 0x7c, 0x7, 0x6, 0x37, 0x1f, 0x20, 0x7, 0x6, 0x4, 0x6}, {0x0, 0x1, 0x7f, 0x4, 0x40, 0x3, 0x6, 0x7f, 0x81, 0xa3, 0x2, 0x81, 0xae}], 0x1}) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:21 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x200000400, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0, {0x3c}, &(0x7f0000000280)=""/158, 0x9e, &(0x7f0000000340)=""/178, &(0x7f00000004c0)=[r0, r0, r0, 0x0], 0x4}, 0x58) r2 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x4, 0x800) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x5, 0x1, 0x1, 0xbb, 0x0, 0x40, 0x4420, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x2}, 0x1006, 0x8, 0x0, 0x7, 0x6, 0x0, 0x200, 0x0, 0x65ae, 0x0, 0x2}, r1, 0x6, r2, 0x8) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="756da3e07ca3c8a56c179a"]) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) [ 1383.720810][T11584] overlayfs: unrecognized mount option "um£à|£È¥lš" or missing value 00:37:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000603100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x6, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1383.826750][T11584] overlayfs: unrecognized mount option "um£à|£È¥lš" or missing value 00:37:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:22 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000603c00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x7, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000605c00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1384.148897][T11613] overlayfs: unrecognized mount option "u" or missing value [ 1384.231296][T11616] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:23 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0xb376) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:23 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x8, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000605d00000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000606300000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1385.157680][T11646] overlayfs: unrecognized mount option "u" or missing value 00:37:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x9, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1385.226566][T11654] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:23 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xc4) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES32], 0x1) 00:37:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000607600000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:23 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = fork() sched_setattr(r3, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) sched_getscheduler(r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x4, 0xc47, 0x1000, 0x8001, 0x0, 0x7, 0x1}, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xb, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000607900000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1385.705753][T11682] overlayfs: unrecognized mount option "u" or missing value [ 1385.841863][T11692] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4000000000010046) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f0f233eb90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4a}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:24 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) sched_setscheduler(r0, 0x3, &(0x7f00000000c0)) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="87c31875"]) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060c100000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xc, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xd, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000608803000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1386.267894][T11716] overlayfs: unrecognized mount option "‡Ãu" or missing value [ 1386.441698][T11716] overlayfs: unrecognized mount option "‡Ãu" or missing value 00:37:26 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/hci\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$cgroup_pid(r1, &(0x7f0000000480)=r0, 0x12) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r3) r6 = openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000100)={"32b844a003c7ce15cae1231f6e07e4ca", 0x0, 0x0, {0x2, 0x81}, {0x7, 0x101}, 0x4a6, [0x20000, 0x0, 0x6, 0xbb3, 0x5, 0x8000, 0x4, 0x43, 0x4, 0x1, 0x9, 0x374b2947, 0x3, 0x200, 0xfff, 0x1]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000240)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000280)={"9557b61c5519f121eae6fa12b7a95a8f", r7, r8, {0x7f, 0xff}, {0xffffffffffffffff, 0x7}, 0x8, [0x21b, 0x7, 0x9, 0x7f, 0x9, 0x0, 0x0, 0x2, 0x4, 0xffff, 0xffff, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x5, 0x3, 0xeaae]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060cd03000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:37:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xe, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:26 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, r0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) unlink(&(0x7f00000002c0)='./file0\x00') getpeername$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x6e) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)={0x578, 0x78, 0x2000, 0x240, 0x73, 0x2, 0x19, 0x2, {0xa0c, 0xf66, 0x1}, {0xfffffffe, 0x1, 0x1}, {0x24f, 0x77, 0x1}, {0x7f, 0x5007a306}, 0x3, 0x100, 0x8, 0x8, 0x0, 0x8c, 0x2, 0x7, 0xfffffff2, 0x6, 0x3, 0x10, 0x8, 0x100, 0x2, 0x7}) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) [ 1388.084028][T11743] overlayfs: unrecognized mount option "u" or missing value [ 1388.279003][T11751] overlayfs: unrecognized mount option "u/file0" or missing value 00:37:27 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = fork() sched_setattr(r3, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) sched_getscheduler(r3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x40, 0x4, 0xc47, 0x1000, 0x8001, 0x0, 0x7, 0x1}, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060ce03000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xf, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:37:27 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x1, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u']) mkdir(0x0, 0x324) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x820, &(0x7f00000005c0)=ANY=[@ANYBLOB='workdir=./file0,lowerdmr=./bus,metacopy=on,metacopy=off,smackfshat=cramfs\x00,appraise,smackfsroot=cramfs\x00,apprai\x00\x00_type=imasig,dont_appraise,fowner<', @ANYRESDEC=r2, @ANYBLOB=',smackfstransmute=[,defcontext=staff_u,smackfsroot=cramfs\x00,\x00']) syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000010200)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000002580)=ANY=[], 0x16) 00:37:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060cf03000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x11, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1389.499184][T11772] overlayfs: unrecognized mount option "u" or missing value 00:37:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:37:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x12, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:37:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d003000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) (fail_nth: 1) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1390.957380][T11795] FAULT_INJECTION: forcing a failure. [ 1390.957380][T11795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.042001][T11795] CPU: 0 PID: 11795 Comm: syz-executor.2 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1391.052026][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.062104][T11795] Call Trace: [ 1391.065398][T11795] [ 1391.068344][T11795] dump_stack_lvl+0xcd/0x134 [ 1391.072967][T11795] should_fail.cold+0x5/0xa [ 1391.077505][T11795] _copy_from_user+0x2c/0x180 [ 1391.082211][T11795] move_addr_to_kernel.part.0+0x31/0x110 [ 1391.087875][T11795] __sys_sendto+0x166/0x320 [ 1391.092407][T11795] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1391.097809][T11795] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1391.103869][T11795] ? __context_tracking_exit+0xb8/0xe0 [ 1391.109355][T11795] ? lock_downgrade+0x6e0/0x6e0 [ 1391.114223][T11795] ? lock_downgrade+0x6e0/0x6e0 [ 1391.119106][T11795] __x64_sys_sendto+0xdd/0x1b0 [ 1391.123893][T11795] ? lockdep_hardirqs_on+0x79/0x100 [ 1391.129110][T11795] ? syscall_enter_from_user_mode+0x21/0x70 [ 1391.135020][T11795] do_syscall_64+0x35/0xb0 [ 1391.139448][T11795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1391.145354][T11795] RIP: 0033:0x7f90f21a4ae9 [ 1391.149775][T11795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1391.169395][T11795] RSP: 002b:00007f90f111a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1391.177827][T11795] RAX: ffffffffffffffda RBX: 00007f90f22b7f60 RCX: 00007f90f21a4ae9 [ 1391.185802][T11795] RDX: fffffffffffffea7 RSI: 0000000020f6f000 RDI: 0000000000000005 [ 1391.193776][T11795] RBP: 00007f90f111a1d0 R08: 0000000020b63fe4 R09: 000000000000001c [ 1391.201767][T11795] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 1391.209744][T11795] R13: 00007ffe1c5cad7f R14: 00007f90f111a300 R15: 0000000000022000 [ 1391.217736][T11795] 00:37:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 00:37:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d103000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x15, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x81, 0x8, 0x9, 0x8, 0x1, 0x8, 0x8, 0x9, 0x7, 0x5, 0x6, 0xd2, 0x8, 0x9, 0xfffffffffffffff8, 0x7], 0x0, 0x10291}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="4788e548b819cdfeb8000000000f23d80f21f835800000a00f23f8c402fd338302000000123e3664450f01c33cc33c430f795835c74424002d010000c4c27d1d6cd1ce44d8c70f08c744240011000000c744240200000000ff2c2466baf80cb8ba7e6983ef66bafc0caa66b87f008ed8", 0x70}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000140)="0f01b3fbff0f01ca660f28b5010066b9800000c00f326635001000000f30440f20c0663503000000440f22c066b8a94014fc0f23d80f21f86635000000000f23f8670ff67e02360f2389baa000b005eeba4200ec", 0x54}], 0x1, 0x10, &(0x7f0000000380), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0xa4a, 'syz1\x00', 0x8}, 0x1, 0x3, 0x0, r0, 0x1, 0xad7f, 'syz0\x00', &(0x7f0000000100)=['/dev/kvm\x00'], 0x9, '\x00', [0x1, 0x7ff, 0x2, 0x3]}) 00:37:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) (fail_nth: 2) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d203000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1391.867239][T11816] FAULT_INJECTION: forcing a failure. [ 1391.867239][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.890895][T11817] FAULT_INJECTION: forcing a failure. [ 1391.890895][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.917277][T11816] CPU: 0 PID: 11816 Comm: syz-executor.2 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1391.927388][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.937641][T11816] Call Trace: [ 1391.940938][T11816] [ 1391.943882][T11816] dump_stack_lvl+0xcd/0x134 [ 1391.948507][T11816] should_fail.cold+0x5/0xa [ 1391.953056][T11816] ? tcp_sendmsg_locked+0x1da5/0x3190 [ 1391.958450][T11816] should_failslab+0x5/0x10 [ 1391.962981][T11816] kmem_cache_alloc_trace+0x55/0x2c0 [ 1391.968302][T11816] tcp_sendmsg_locked+0x1da5/0x3190 [ 1391.973538][T11816] ? find_held_lock+0x2d/0x110 [ 1391.978326][T11816] ? tcp_sendpage+0xd0/0xd0 [ 1391.982853][T11816] ? mark_held_locks+0x9f/0xe0 [ 1391.987640][T11816] ? __local_bh_enable_ip+0xa0/0x120 [ 1391.992961][T11816] tcp_sendmsg+0x2b/0x40 [ 1391.997222][T11816] inet6_sendmsg+0x99/0xe0 [ 1392.001659][T11816] ? inet6_compat_ioctl+0x310/0x310 [ 1392.006889][T11816] sock_sendmsg+0xcf/0x120 [ 1392.011332][T11816] __sys_sendto+0x21c/0x320 [ 1392.015884][T11816] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1392.021369][T11816] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1392.027368][T11816] ? find_held_lock+0x2d/0x110 [ 1392.032162][T11816] ? lock_downgrade+0x6e0/0x6e0 [ 1392.037040][T11816] __x64_sys_sendto+0xdd/0x1b0 [ 1392.041816][T11816] ? lockdep_hardirqs_on+0x79/0x100 [ 1392.047027][T11816] ? syscall_enter_from_user_mode+0x21/0x70 [ 1392.052934][T11816] do_syscall_64+0x35/0xb0 [ 1392.057363][T11816] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1392.063351][T11816] RIP: 0033:0x7f90f21a4ae9 [ 1392.067777][T11816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.087477][T11816] RSP: 002b:00007f90f111a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1392.095895][T11816] RAX: ffffffffffffffda RBX: 00007f90f22b7f60 RCX: 00007f90f21a4ae9 [ 1392.103869][T11816] RDX: fffffffffffffea7 RSI: 0000000020f6f000 RDI: 0000000000000005 00:37:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x4002, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1392.111854][T11816] RBP: 00007f90f111a1d0 R08: 0000000020b63fe4 R09: 000000000000001c [ 1392.119830][T11816] R10: 0000000020000004 R11: 0000000000000246 R12: 0000000000000001 [ 1392.127818][T11816] R13: 00007ffe1c5cad7f R14: 00007f90f111a300 R15: 0000000000022000 [ 1392.135826][T11816] [ 1392.138844][T11817] CPU: 1 PID: 11817 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1392.148836][T11817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.158906][T11817] Call Trace: [ 1392.162186][T11817] [ 1392.165126][T11817] dump_stack_lvl+0xcd/0x134 [ 1392.169736][T11817] should_fail.cold+0x5/0xa [ 1392.174247][T11817] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1392.179971][T11817] should_failslab+0x5/0x10 [ 1392.184480][T11817] __kmalloc+0x72/0x340 [ 1392.188647][T11817] tomoyo_realpath_from_path+0xc3/0x620 [ 1392.194286][T11817] ? tomoyo_profile+0x42/0x50 [ 1392.198988][T11817] tomoyo_path_number_perm+0x1d5/0x590 [ 1392.204447][T11817] ? tomoyo_path_number_perm+0x18d/0x590 [ 1392.210085][T11817] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1392.215925][T11817] ? lock_downgrade+0x6e0/0x6e0 [ 1392.220798][T11817] ? __fget_files+0x23d/0x3e0 [ 1392.225487][T11817] security_file_ioctl+0x50/0xb0 [ 1392.230435][T11817] __x64_sys_ioctl+0xb3/0x200 [ 1392.235130][T11817] do_syscall_64+0x35/0xb0 [ 1392.239562][T11817] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1392.245472][T11817] RIP: 0033:0x7f946be28ae9 [ 1392.249888][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1392.269495][T11817] RSP: 002b:00007f946ad9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.277913][T11817] RAX: ffffffffffffffda RBX: 00007f946bf3bf60 RCX: 00007f946be28ae9 [ 1392.285884][T11817] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1392.294025][T11817] RBP: 00007f946ad9e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.302003][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.309972][T11817] R13: 00007ffed943213f R14: 00007f946ad9e300 R15: 0000000000022000 [ 1392.317961][T11817] [ 1392.339706][T11817] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1392.642832][T11821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1392.667215][T11821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1393.550246][T11821] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1393.589368][T11821] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 00:37:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 00:37:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d303000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:31 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004", 0x45, 0x1600}], 0x0, &(0x7f0000013b00)=ANY=[@ANYBLOB="89"]) 00:37:31 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x6, 0x80, 0x9c, 0x7f, 0x1, 0xf8, 0x0, 0x3f, 0x18198, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40200, 0x6, 0x80, 0x7, 0x80000000, 0x7, 0xff, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, r2, 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000006500)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000006540)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r7 = syz_mount_image$btrfs(&(0x7f0000006580), &(0x7f00000065c0)='./file0\x00', 0x7f, 0x7, &(0x7f0000007900)=[{&(0x7f0000006600)="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", 0x1000, 0x2}, {&(0x7f0000007600)="c3fa08cc59", 0x5, 0x35b}, {&(0x7f0000007640)="59546fe63819aaad63425a086328f59898eeae59526eb5c24375469ff18b6533eed3c8f501635c7956899e7e01b0c52c45b1e7fb220926eddfad0ef612f2195455e5e269585cee93fdab876e6f8058dc0f2e452fb01b92c07b47ecde4b2901d3894c80349bacb2922976938559e10ff4bbbe0f1a7e70b0ccd4334e083205d349825d2bc1c3e58953bd5ce249681878b6179c883f783bbfecc885eccb219de7254908bcfffdf4f6238b88d4f08fa89b058bed67fb5aadaa9b716755ea44ed160d95af5c59eeab6487a329c32a812b7e691cdb9ae2af82e003490730d631b30333b26bd9a7c484c81c", 0xe8, 0x9}, {&(0x7f0000007740), 0x0, 0x1}, {&(0x7f0000007780)="ba", 0x1, 0x6}, {&(0x7f00000077c0)="02d0ecd306fdaac82053b5bf6ec87ce38d36a6994db53072454dfa0aeffa2c8f51f5bcf49f766fc8363638fbf31a33cbd5f48b7b36b0afdcb5952045db8ee30883cb262691e3cda1e115a19eaa0ac4935c1ceaeff3cfd4b5fc151f6ca548abf322b480b6a9c69ba6f4abfa0e4de71434ba4e63bfc4bc4972daa9de5458c0ffec26c2621c6fe72e08deeba3daebef36a641940d64894e8b0e10dfab541c062c188b536e42ff96909b3d8e58c28b76952b9109628fd1120e75719d365808515310a8071e567561ad6eb0badb8b3a0707eeb0ae1aa945332ad4098b9f0c5abce0cd4ea72f3f65cb", 0xe6, 0x8001}, {&(0x7f00000078c0)="ae066c91650ac2d3a4511fe789ff536214eae1a8451b610720470a7394762bd626c8ede0a990c89c42121767880841b150", 0x31, 0x5}], 0x1800001, &(0x7f00000079c0)=ANY=[@ANYBLOB='space_cache=v6,compress,datacow,degraded,euid>', @ANYRESDEC, @ANYBLOB="2c736d61636b66736465663d245d267b2c726f6f74636f6e746578743d73797361646d5f752c66756e633d4d4d41505f434845434b2c7375626a5f757365723d2f6465762f6b766d002c7065726d69745f646972656374696f2c6f626a5f757365723db6272c7375626a5f747970653d2c00"]) r8 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r8, 0x1f00000000000000, 0xd4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="0b5786b1849494e228620d6595df25ace8257d96380a24ebb01ff75b5f9ee79bcfca179e519de7d47a200ecb89096120882929ed2618629db9d8a7423ff69c58f7841b3c33a203649d3600c8159fa0c4c26a9d7c06e6457bb969218f28933a8f56810142a640ba114060e08d1dcac886de8c476355e91ae769a2c1229d8c968e6cc8997a5979df46", 0x88}, {&(0x7f0000000440)="d2ebb8cf7cfb4bee75de27c2fe1cd04998fbb4815ed78912b8f6277ee3972f4eef5b652ebe97d66ec3c3214a607a2c3ee97d6880840ff0e3afe43fed23baad6cf1b88c48d6bd66341457531bd17f125668d4eaa6443feebc57beb39a885bde06b7782feb9f25136c170567974cd103e9dd50632f4478ebf194e1f9935ce289ce483e58178a8a9b0ea709a1690c48521a1af43f08ef3f5fb03e39b2ff35569e9e9063909821f476b29ca6cdcd6fe0ceba2fbe3380b151f552fe1a02040151397e0f", 0xc1}, {&(0x7f0000000540)="097ebb7ea6c3a752fe8cd950ac4793ae8b45ce04aea80bf822e0f334f79105137de9a33c39af4820972e943a42", 0x2d}, {&(0x7f0000000580)="b70336d7fe1c593626298f08359d7d25d1e4b121391c4c175f3aab7ff96089b3c3a44fae907717c088ded841831f75b80a7e18f170e2de6e2a6f86fcca6248194cb8ce542150ee7bb5aa0d8d03c019791d2753d3c721c1ee2ae5e332f5651e04bf4427679a9380112b95b222aa427334f27d238c996199fe64a5c8daff334f7bb7848b581187951e6183e160a95e7117713573d705369f2f33403529ffd6ae567508b8079c134017d754a3fb8fdadbbc6a29", 0xb2}], 0x4, &(0x7f0000005f40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x98, 0x15333c4b9d8103aa}}, {{&(0x7f0000006000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006480)=[{&(0x7f0000006080)="ab6df2e15dfafda6b3756163948ff48c05de3591cdd311381b4f47188445e0020f0ea8ca0c5f45d231b13a92100753a80483d1700d97b542bbbeacd2721a39f2b51e20daa1be11f2a91915a607af994305e9aa8148d61b174341", 0x5a}, {&(0x7f0000006100)="8a35d6fee8e89e75e7de0ab8c94a2d3845018c3e75a8dd7f79e1dbc346c688363c459cbe20b469e18d19aeadff22cbe83996fe782fb8cbe52b229e5b12d536d2d4b21656e1c37cc2d03a3e3d84ebc1b84871158843c5059f929d69d15f618e0629aeafddfbd1a65a2092b526fbdd7759710d5f8b08377b9fb6edd8e16acf6cfba1e32bd69914794fbae3494acc48aab525ea52", 0x93}, {&(0x7f00000061c0)="dcd03aef2bd3c5a53c355b61b917d9876062a7e44e7a6958fed649429ffbe6b357ae5102aaab13b1f6d82f7da56eb99c101119a861a8e5dbed3f65057546b579c6a576bac055d1f479ff3cfeff9bd0733af2898946c8cd0507329e918aa2855813c24bccf9b07c50e514ea6429f7e95f32260f1bbb83e7b5d675a2a820ff96e0b46291ae9fa1430c942bfd1fd82a81e733d4110444343c3d", 0x98}, {&(0x7f0000006280)="0347013966e030d2f5a4081466d2c8a16e1e00b5bc0fbf1ee64d46494994cfe52c2f5fd4fc68a0660288fa9eda2accdbedbaa62e01a823b9070b7005f60bf9ccda7beca616fe9a2df778e20507f04fa194a6134c220f67474553b6a199f518e62a896c360f1300974514f230e546dea3eb84879d9c619ff83358b323deb9c40b2c62b35bf39b8df72db97465a23a6836fe01d30881a9856af712ce3abd858a533efd0fa807f98215462a3220ce13af90bcd81d750bbf76f5c28f30dfc6c20a71b04ab2bbd3b0", 0xc6}, {&(0x7f0000006380)="bcef3f8a0a25aff93cf89467b60dbff1806e11e0e47508776a072c7b2d053848370acbff391b56a4b82ea761ec13a763e051dcd51d9c7ea5245cfbf2f5cb8a53bf03e10eaf4e5fb8b8652113079e42c59fbe1ebb6e8161e57407aa3604e6da36298f3256dd1f05bb2b174772724f7f71ba5245cb136fce672c2f4f0c81220494cb51368e2c483e69999ca010f78bb3dca57704d1f02ae5a00dd6cb17073b89e5a0658cd76ccacafd806a2fb2d1e43ad68298ddf29d8f50b973c84da23cf43d6204b714b2e5e273bb095d85014ebb20ac53b552ddfcac769589090a84215f7343d87d9ea6", 0xe4}], 0x5, &(0x7f0000007a80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r7, r8]}}], 0x58, 0x4040000}}], 0x2, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 00:37:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d403000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1393.918878][T11852] FAULT_INJECTION: forcing a failure. [ 1393.918878][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.957230][T11863] loop5: detected capacity change from 0 to 1024 [ 1393.984776][T11852] CPU: 0 PID: 11852 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1393.994804][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.005318][T11852] Call Trace: [ 1394.008611][T11852] [ 1394.011554][T11852] dump_stack_lvl+0xcd/0x134 [ 1394.016177][T11852] should_fail.cold+0x5/0xa [ 1394.020720][T11852] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1394.026207][T11852] should_failslab+0x5/0x10 [ 1394.030740][T11852] __kmalloc+0x72/0x340 [ 1394.034927][T11852] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1394.040160][T11852] tomoyo_encode+0x28/0x50 [ 1394.044614][T11852] tomoyo_realpath_from_path+0x186/0x620 [ 1394.050275][T11852] ? tomoyo_profile+0x42/0x50 [ 1394.054984][T11852] tomoyo_path_number_perm+0x1d5/0x590 [ 1394.060471][T11852] ? tomoyo_path_number_perm+0x18d/0x590 [ 1394.066133][T11852] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1394.071998][T11852] ? lock_downgrade+0x6e0/0x6e0 [ 1394.076886][T11852] ? __fget_files+0x23d/0x3e0 [ 1394.081589][T11852] security_file_ioctl+0x50/0xb0 [ 1394.086552][T11852] __x64_sys_ioctl+0xb3/0x200 [ 1394.091341][T11852] do_syscall_64+0x35/0xb0 [ 1394.095778][T11852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1394.101694][T11852] RIP: 0033:0x7f946be28ae9 [ 1394.106130][T11852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1394.125761][T11852] RSP: 002b:00007f946ad9e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.134203][T11852] RAX: ffffffffffffffda RBX: 00007f946bf3bf60 RCX: 00007f946be28ae9 [ 1394.142194][T11852] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1394.144976][T11863] EXT4-fs (loop5): Unrecognized mount option "‰" or missing value [ 1394.150357][T11852] RBP: 00007f946ad9e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.150378][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.150394][T11852] R13: 00007ffed943213f R14: 00007f946ad9e300 R15: 0000000000022000 [ 1394.150430][T11852] 00:37:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d503000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1394.188628][T11852] ERROR: Out of memory at tomoyo_realpath_from_path. 00:37:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1394.255803][T11863] loop5: detected capacity change from 0 to 1024 [ 1394.296455][T11863] EXT4-fs (loop5): Unrecognized mount option "‰" or missing value 00:37:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 00:37:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000300)) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141001) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd4, 0x0, 0x0) read(r3, &(0x7f00000001c0)=""/128, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x4000010, r3, 0xa4082000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303, 0x37}, "000cd2000008ffff", "fdfa9d88223aff8be80002ffffff8d00", "1200", "15b8fec5994b1e7e"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:37:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d603000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x5, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060d703000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:37:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060ad26000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="66b8c4000f00d0c4e27d47b4923f0000000f351666baf80cb8f404f48fef66bafc0ced2e0f425b0460c4c2d5b65baf66b8e5008ec0c4e15de88a2f000000", 0x3e}], 0x1, 0x13, &(0x7f0000000180)=[@cr0={0x0, 0x8}, @vmwrite={0x8, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9}], 0x2) r6 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000b805000000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:37:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060ba26000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 00:37:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600037000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x10, 0x0) 00:37:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600038000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x9, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:36 executing program 3: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000004) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81, 0x1}, 0x1e408, 0x0, 0x0, 0x0, 0x63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x231, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 00:37:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600039000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4c00, 0x0) 00:37:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xa, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0xa00, 0x0, @empty}}, 0x2000000, 0x8, 0x0, 0x0, 0xb3550aa4ba878295}, 0x9c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="33d0e762d661046bc529bb2079b4ad7466213724c106996f18935a148a", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3}, 0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r3, 0x8a7f, 0x3ff, 0x5, 0x6, 0x3}, 0x14) pipe(&(0x7f0000000100)) 00:37:36 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x1, 0x20800) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000540)={0x3f, 0x48, '\x00', 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) r4 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r4, 0x1f00000000000000, 0xd4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000003c0)={0x80000007}) r5 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) r6 = signalfd4(r5, &(0x7f00000001c0)={[0x7fff]}, 0x8, 0x80800) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xff, 0x7, 0x7, 0x5d, 0x0, 0xfffffffffffffffb, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3ff}, 0x110, 0x3, 0x6, 0x8, 0x4, 0x1, 0x3, 0x0, 0x57, 0x0, 0x1}, 0x0, 0xe, r3, 0x2) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x20c0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r8}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/dsp\x00'}}]}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="00b81f60115a4ed26e682cc0000000000000000a00"]) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f00000000c0)=0x79c) 00:37:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xb, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003b000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 00:37:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x20000009}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = socket(0x10, 0x80d, 0x0) waitid(0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffdfff000000000900010063e16b65000000000c00020008000600e2ffffff"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0xfffffffffffffd47) sendto$inet6(r0, &(0x7f0000000080)="0304961f5c0060004003002cfff57b016d2763bd56373780398d537503e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a9000000fcd0843e770afd6e9ef5837dbd0000000053", 0x6c, 0x4000002, 0x0, 0x0) 00:37:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xc, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000007, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1399.574820][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003d000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:38 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x2000000002002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ntfs\x00', 0x0, 0x0) clone(0x400, &(0x7f0000000140)="94554336750ef2abcd2accdca1238c792004d9c6f7d6f065cedf1497635c20c41fb2a8f2c25ace89e134457e4e5f61644e7c6868d0a41fe20bda957dcc5f6e74e9f17bf17dbcfc780829a8c040540243906db507716389c7defc628cb5e85b029fe6e3f0d0d58e496ae51a8a19a62c6471", &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)="66054a86bc0887bf11d87b395aa92f539074d60b67603f276b5a4583b9d760bd65afae7b6f67bec08922221a015945df906b4c2207a6147065b4f9e5501c113d60eb91cecaa8c15e5e971969c9945217cabc1878c86f4688c55682ddf94ae45ee861745c19b5b50c5c9fac4226e05058d44652984c0b97937a81478e7c8f99cb65e3c8b1096ce445a006b82dad3083648c22a6a3be35855ca3e1120fd0a8b7ea0353cfada748f22af0d7f27918959d4bcb037fab7bfc4781334ae03a0c9bce2b0a046774803acff8c3bcbfa0e4b32b3c42905d2a09064ee76392ff310d") [ 1399.917958][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:37:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xd, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:38 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x122a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xecd0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x9d, 0x5, 0x3f, 0xff, 0x0, 0xb72f, 0x2010, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf7b4, 0x2, @perf_config_ext={0x7, 0x1}, 0x3e58, 0x20, 0x4c7c, 0x4, 0xfffffffffffffff9, 0x512aaece, 0x400, 0x0, 0x2}, 0x0, 0x7, r1, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/82, 0x200004d2}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/240, 0xfffffd74}, {&(0x7f0000000700)=""/4096, 0x1002}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/254, 0xfe}], 0xa) 00:37:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) 00:37:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xe, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003e000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:38 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="b2d0a9310d6e5fb23e2b30257eea2812ca725000d01c37dfff01166cd17065346ac31e7f9f6d4310777494552061876d188023307fdea283a51b4061e8b7f8424e278188b00de172"], 0x8) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x20000002, &(0x7f00000000c0), 0x2}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) 00:37:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060003f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 00:37:38 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x3, 0x5, 0x2}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000480)={0x6, 0x101, 0x1, {0xa2a, 0x101, 0xc11d, 0x2}}) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x6, @win={{0xffff, 0x77bf, 0x10d, 0x80000000}, 0x5, 0x1f, &(0x7f0000000300)={{0x6, 0x2, 0x0, 0x1}, &(0x7f00000002c0)={{0x80, 0x1, 0x81, 0xec}, &(0x7f0000000200)={{0x40, 0x7, 0x1, 0x8}}}}, 0xfffffff9, &(0x7f0000001340)="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", 0x4}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0x1000, 0xc, 0x4, 0xaf838b52b31df4f0, 0x7, {0x0, 0xea60}, {0x5, 0x1, 0x9, 0xf5, 0x7, 0x4, "57177339"}, 0x3, 0x2, @fd, 0x80000001}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c3"}, 0x0, 0x2, @planes=&(0x7f0000000100), 0xca80}) 00:37:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000008, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xf, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600040000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600041000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) r1 = syz_io_uring_complete(0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffc, @private2, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) 00:37:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100005070000000000000000000000000845f5cd5611437c5c922edacec6171718f5fec1bc9a4655e58db8b50c33d5f39c97f3855031bb7d9c449beec5b1a4bc3b63d0bb87fbd6984176b778ee22a27fff9c3e93e96578594fc72963d48fd027fc2f9332744ec7c0f2ac35c8f727e13ed0084db4b9286980240cb31a54870000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005800000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2080055}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:37:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 00:37:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x10, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600042000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x121002) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000240)="0eae01db45ce6230df8b5532d3088383bd2711eb645d11c2982a6ba449234ff4f1f7c6ad9daca2778ae1a796c50b0a2707") syz_mount_image$omfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x20, 0x1, &(0x7f0000000100)=[{&(0x7f0000000340)="93c0d84a93784707f08cd2095923a2cb4a44bae39e40ecfa4966f8f7df98784bde353358c88bdd4a3f59d5639c36f170384cc52218eb702555ffb7049304245daba94982b74f3aab4be3515f163f1b5b7ccc60a35a2271e3943bef4fba87009bf7672ee9fee8e52721cbd9d2011e88a45f281410a6ac5e6b30050a88764dca9a3e17077f6f1cc93afeb4ee95280612382c296c79246fb2a2beedf1c77d04172b757f048bf285bb343afdd8ea803469d0101cf1053c33469bc737eb29f1a3f89e3c904a619af0207505c98a7231b2039f4ac16a06d63e45bb1ef46bb80081bebbf35c1db2ff81c90cf4a188e45c2b48e349fd28fddcc6d82eea3ede8cdf49e2a504a78fe2c26e1d1f5a1f7d6d833124a29d3c0e1c0c6a1eeca3d588c37bd1512913fa8e465bb7eeee7bdf88f1ca19eddd6116f9c412582e1f0c0861caa6de9bf8e9e332a6a13a20361579e99ce99b794cf5beb33c95001d7fd8c6e0e362170d762713ea380707ecdfd36ff61f82438daec985da1275b435bc367c48f365376621548e06ce255da25557a1b6a0db028f2399a42c8138e49d5958362981fd63a81d4c83d2b34461b4ecd5ce8905a585a70dfd1046a888b6e7bd95044933947f416c09b5536d388af226e44044a8a56a712ab8b2677293bdfb25756f226863b29d3bc810e16a5d6ef1ad645b493bb9d00f721a47f2abe870e87026b7b54f11272712fe175db23b3a250d9fd197dd9a4e0ee4dddffe4a5700765ea30d2134bdadda76bda813286bfaca6911fbab3c4d977191f2f79e4184ebc24f05827ea242b20399e3d9ae8a950d3cf92848fbf8ad912a9e6983ca4d7fccda8579459ddb1f6eaa0c0cce0847b5dd070d0babcf390705e257bbe2f68879f4013546cb67d6b7fa8e6ce4fcdea29d52fe74160ce0e52957a79e6d1ab11eba9583f7550ea649a400603bcce327e3d07390e83ca99640c019bf24eaad262cd6b6444828c41d438da6219f752bf944916ddd09896fd74a511c23a0941dc5fa1a97f5222beec8bbf57005af41c031d78f5df8fada64054a6e76eac965348906da1011af9b5523c640d1fc85f21ed2e430a3a4236dfea135837bf8382ff01d99e681d5ec458bfa898192ed4b742741983a77757c272e7f52e7c14c243828aeea67b0b5e85d7db3acbe0b5364ed0fa99dc24df7b6f08d66dbce8a964d960cd68b506e3c263707d5da418f362e46f9658dbc9deb34a5f7b3200c431048491aea15b1d4c9abe3946e4b0a582ef5524929524067e27d14cebc32efa5d8f083dec1f0fbcb710b7d78d786c3c5509082a0c05258dacb98703fab8fe51e4c55f9801fbde4edf368ae1d8df857cd8fe738d4e52e34c29517b81ee3a0861a54ea254f3d6ef8c6291486d1623d81b73e782f9aecea58bced4cc4e28ea4bd85939f546d416abb2cb7503104e502ae1794374d37e8ce688efde67d245ac84ce8def99538c75b9b18613a27b63136b5c4e702ed825e5523d8a8b92c8933a0f4f2bca5fddc9ad456369debec4a97e30584fd14351a930c59595d1a44a6b96d7dce7e6dabdfbb920eaabd1e6da6dc7802f69d9565f3bf12c5767bdcf7cee56f295074130e4443bd8e32fb8f41c62c70cde6bacef05c43560f7c3ddba68fd1bce27bea20edf08bad3e02b7e8ff9371fee5f33fbcca316857fd37c59a5378708517ed63b9134dee401f326045de0d1acafe8f2a582402c7d49aebfbfe137e5695fd3a254ac92e5d5e2235f7dbe320f49b9b158739e703f2dbc1f73b402166b68c942956ac92e1b9a780dbb3425b6a2c33a41dc060827b5112de4b15f4fac744a61c6e3b7ee47364be84acd725aa9b67e86e6e8753258e7c58c87821eaaafe018353d8647b20b37d78ed19fbd3a8f5442810f9a1fe662fb32a324e31784ff1940659f04e6249be216d1c6a08f970676df93e7953708b7ec4ec36b2cd2a1c0edc60f3fb2ecc85828da5939a62c167f2586602169ce83b4fdc7e3503af23bdc11913321a0bf2f69f47ab06c5649a59593b90c835e0d730968e4dfb35b9a876666e3f897b40d5c8a1bcb9c53a5efca12853b2154e1ba9b379dbaade0b67053c912e260d0ed874730f1779a86497de9382c961ee2c307894f3819ec605b30caaa052e44173060a18a9f3eda73302b8b8f8ec7a51e5b9d94c523311814c74248106fa1151f073b9e0a13836ffd1b3c31188c09c74ab557453c9a198801ac490448e3bee02c359ada363fd751ff28da8bc0c3b833b915194160d9dd535da65bfb6379a02ada498f66ca7996f56e99f627c35f4431ded279b9a328d89fc1a50861dca30bae21d73e9a853d9600497edf5e14e459124dafd1c4fe3d8b17d3b548f4a9a924c59bfbc99c4d52432b4d2ee9b6d54a41e972f2e400c8aaba00464dfa94112c7b85e46a38bb6eb299df8b853264e53de71362610a6c987b3812f411655cb86987d02896129edf63669ddda9aa8cc6802fc0dc7ddc9d1b76526f5e6403d6d643eacddd84d1d691fa1bfa17deeb29f1b9f38d7802fd03b8000f1256dcd5631287d0467b49fcd263a935344e29152329cd0f8a17c4997bba776d322fbd0c742681ebed69af61fa3b028c4cd77f5a7b1392ad7048afd40b0963fbe6c5b32ae0e7398d0ac913de375cfb41eb0e91dc02ae26a3e1f6d051a71beba78bb6bdd992ac0db10b2596b0b0ffef01135d43ffb2285b39e286a71987825aba1d9268297f4e3d1986a89561ecfcc5bc6ca780ffc858fc3a346fbbd22c978ff5681e54a3e8d025afe0ee69278ff2ef7c70b0d5d4f10af0c0531b2b62f097bd75f4fc6e370352ab3d26d64f39529572c471c92027d4824ed9a949e729d79ca746b6d8cfd586ae57c341618bad46818626bec5a819996a9f406e1bdaf7db4f86d9cf55a2564190e5b28b31856f772f83ac52b83696e7e85db9252835d524602e4715face7cee361c3de0779f0bca6d3211f37b9d963490bca0cea06128b12244feeca8184a048031d6b4a0a9415eaa483e6f26f13eba7fbedeab6666b8936a9e1356a250d9fc725f3bc2f9327e5bca9f4b9496f2fee22eb5c50bc07cdbed5b096712bfa65838a5e74b662811714fb759acb9466ce3fa430660c29bb1d6c2b6da190a03038c5331f917148dff12aca63e8563f2048c773814677ec35812caa8cb7f4e15c937b1a4069ee23a49c5e82e2dbdcf73dbbc5be7bbcd7ad6a8142790108a98370224c17db704659503837739dfc293e5b276aad0f0414634559c75e13b967cfcb03c2ac5d61534c85486669dd956555498173b7f880914fc4bf1f7e257a6a0642d935f41702de1cb4ad4b497c6bc14bf955b336e55dd1a6e443c1730cf9160578f647c788b7a7e537237baab4e4f06bb83323bce73bf5ec79dbd096ea95a953bfc545142400559e553492c4c9fc2617fc77403b981d9538782ae38d337d16b51a36725740a933eab327706ffd7564e921a216bcb43578405fc2c7ab3a340726c715ddb23d00139e679e923cdf8b527abdf162a89e5eb1df4dfa63e884dba3c21cba72874f92f8d15741902a9b9decc92157b500cddf9258943d14842d84b4027ad4afa8901326600388500ed5c7d322936da8dcdb7eb742177201af72f37e0e8999b46d070d13faf6bd58f556dbc4742d1b1372b963930503b452e2413de42c39bab79e6acaedf6425ae876aa6c96fd08bf2159e1b1967c8e512615bee8d84e4952bf99b31a73ea60b8abdad677e67086128cf1bc8e996495b5d8731851d94b911c4d32170fef0d42704dc8d0b0c12dbd2d44caefb752d8fca87a94a83b5bd2ffca5ba1ff76250f2935d1b6af52b5cf8e7d807e214c9439fc3e3a94beec3fe56dc2ea19d9207f83d474ac6b2e21267639b2bcd8a027b77a09f1d43c1d15f677875cb8879b5a8d440633b60ddc3e2512f20bdc5de49f4eff9e161741c10cc9e72ea4e1137483411370a939891ef8191bd1b979e00f9d3de17e70b4beb06668035b58a1c76e4cc69634413d6497c9339e57500d36b37ff9497c2267e4ac4bbd2008a83554dba88638a1613635bd1d3422e7fe79325a4278577885d4e97f54f0071f55d7fdca280be7b5c5c4c412e7263476b4ffce9dc77eb8432817be943d47b17349beea530fdb1eadfb1eb5087ea623cc05d445b2a95fb4cc62ef73423ab60406f2225bcdcdd3078647f2f7006a875527b30141fed01d0952eba8ddb0c5572dc5d6450835c832cc5d77e9ee78af58f819917ed155cf0df95ea50a9701d875e53b7fc7e0d8f5c60dae9bb59e38432df3efc89850a53193066feac1e98af3f33f4864621c07178901260e8614b725f6eb8944619649edc4a1d6375474be251ee030af6bb6e1233ca47f11ac934a03e026f4bd003f261f2b14909729c1403b8c4f58c9d85cc8ab50518a0c4d03829914de78bda803336d011b76b6e564ba7220aef697a7094580a37ce0c894a9b152778374c832b27b816b225ab77537b890f6afce2a2107dcb0c174769b1d6d9959b274cd87bb784ee715ded3ffdd60f2edaae0dd83a33e109fa0a20fb4d99ae0d937bfc4284b040c644a6259ad5db0dfd9b8d0a8e74cb45b72ba7dc2fdc57f559636de3f52c80197cf2dc78135ea013f52fae91566c395e145dc4f6aac6ddb47c30532137f4ab6982bcec2b529305ed994162cbe4b6997c7ca40bc3b40a0703c3fc282bcc8e283699b51854060a34401f60b63ad735e3bb6c870991682a38396e49b5893ec870bdd989d4696544dcaa8417b6882ad459c9ab363324747a406ff654d7e5a3427bcfb17abef68a14e0e0f4c8042835ad11d87758171c4af40045dd38df2686f77b7a7836121ec9587440f1955d2dc1590a0ff42179f63971c0d01eb2e4d00dc61d586d6f93d97de7fcab8567aba1d03db9720d51fb64009359b7d270f92de56b6fe8188f71827e39e58eed0e157159b25162d174c00271e716f98050d2f84a7b6ea7cda2afda6d9bc5abc9c48aa27fe3d1b1172eedbc2a0ebf380e675c7eee9ab753f40faa9b2591fb016fdc70c2536da18846c33540aa82030c960ea3edfbf8c6768e4d492a7e41e5135946c885802d1184b9b67aefd294f1cf459ef24f42b45b30ac3c1ce3e2119a55b0bcad7d75acd6001a3a54ce24cf2860dd6346a301bfeebce2db9d21c08312efaf3a496e3bc512fd38519d2fdeeb6053405370986e4f01a0a4b1757a81824fe2a7bb4bda1d32658dae328e1339928d148ef3f4a90dd55b6bf2b57a8368d595c488d3a8717d8382981d728844ae4e10264cc35f378c6060f0421f0956d266def0d9ed60629865ffc7e2404d8e1bb8c50ab6554551f474ea197983aa6b79c5629ff8fb5dc59a6ae939b3d4ea199c34656b36f111531e3768c022651c1dba000dee02ac6524b9228bc15dfe2095e8bf3ff8a4dbd8b34713be77ccece8c026758ff09823192262c74e8d9226296906d6373e76c72acdb200468e87962e9e4e82b8f6eef42048bb8c126f9e7132b7bacfc6168613ede562111658ccf665b7512abcc1b2402f2b699b2c5b50eeaf413bd786d6ebc75605fc63fbaca240a5933a133b7fc3f69e57de420a7e37be52dda4c9cbae3c6d447a929df04f17829be358063d113c357c2f8d679f069235e9eefdb9359c1950c94bc3f9434412dc6902699f3f04ee40fb84d49e38e848692b545ad2acac29a903e76a13d077fe045f16d68009c6a0138306bafe84ee4af389d3ed3aa57142edcb5b8bb7b3569957be67f198effad2e292f180d7a976122dd91cb103b7e05f0bca5a90190a9440cf809edfde4", 0x1000, 0x3}], 0x80800, &(0x7f0000000140)={[{'{+'}, {'+'}, {'**['}], [{@obj_type}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ttyS3\x00'}}, {@subj_user={'subj_user', 0x3d, '/dev/ttyS3\x00'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',!'}}]}) setresuid(0xee01, r1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5393, &(0x7f0000000080)=ANY=[]) [ 1401.517865][T12130] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1401.630599][T12131] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600043000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2090, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) syz_mount_image$jffs2(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffff, 0x5, &(0x7f0000000840)=[{&(0x7f0000000380)="75b8ba1c7eafee5daa5b9035b50a2ff31852d047920f80a3e2fd4b61915c5aa8b7f50efb906b838951417e32b9fbce18c97bc41a78723bbee1ef6b0a033d5be2511db03914cb754a7ae6909722219a7f13c28c3e827e18073771d30215d8ec673d52c01517b351b8078774fad18352eaed7bed634238d215e1c62d1e33efb169cb75e633b8c41cd696f16cf2045e935ba9535f7a4b89bb5db7e1a3e1a9304599feecef19d6e4148c50635a8c2f8eea0ec9c871765fae3926f3bfbd793b906986e69cbe12999940dd6a847fe84e37901e8aa96d4806827d87477d363936c2", 0xde}, {0x0, 0x0, 0x7}, {0x0, 0x0, 0xaf}, {0x0}, {&(0x7f0000000740)="bc24e98b490c343a739ab596ca87d1c88c25708176f0458ab41b968a5b07e3604a17034995e6ebe63e6f6f38396995a43285ff168390b30addc5da3d2f2bd602e3dc98111d86c2b93011e97da080876289e4041d73d42788d8662f491aa06a3d5e775f210cb7f33ac5a110f6d51bee86160d55b9e1d07e4ff888b9664c066c2f864119", 0x83, 0x4}], 0x0, &(0x7f0000000200)={[{@compr_lzo}, {}], [{@obj_user={'obj_user', 0x3d, 'syz_tun\x00'}}]}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x488c4) [ 1401.944099][T12148] loop5: detected capacity change from 0 to 8 [ 1402.054617][T12157] loop5: detected capacity change from 0 to 8 00:37:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x11, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600044000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 00:37:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000dcb1b04f7179fac75b0029000000430000060102000000000000"], 0x10}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x0, @broadcast}}) 00:37:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600045000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:40 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000240)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x80000000) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="5b05ea6f1bb6f9ac937e72a739e885cdcf643a3a5d3aa487d79cf035d27f8e10df88aa24df200ed17fcfbcd21b977c2da974fe86f8e8b71bfab844edb3af24d8b222243d6919022c43207ce8f808093962d330ce827182b67d7bb5e330b92f495d0c8c768d9ca6e50002c0ede306dda0525e928af67efe4a3a4a0e326b476c07d925b8ae90bc13b6dadb585c153d3efe1f5bb0cec52a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) clone(0x41040000, &(0x7f0000000580)="3b0227e30cfb76fceac0a96210bcb7ed3703aa8caa4970b122cb0f74c6d7e2153daa338b9ffecd3254966ad0d23ce4abb75cae536abd855a9d43dc570120df26e997a01527b448e714091b70b656d76d506032a1c2073a4fea3e496a9e10c50ee0016adf14fb21e56cefd9ce5880f31907dda47015b65dfdeb7c752b36120f237c21b82bb19fb30bd9dd", 0x0, &(0x7f0000000100), 0x0) clone(0x4000008006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:37:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x13, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 00:37:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600046000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1402.555053][T12188] ceph: No path or : separator in source [ 1402.634424][T12197] ceph: No path or : separator in source 00:37:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x14, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 00:37:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600047000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 00:37:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x15, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000a, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600048000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x16, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:45 executing program 5: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400000}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x80, 0xc1, 0x3f, 0x0, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x1, 0xeeb, 0x20, 0x7, 0x8001, 0x1, 0x6, 0x0, 0x9, 0x0, 0xa7}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x80000001, 0x40000) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000013c0)=ANY=[@ANYBLOB="8006000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070abb31de1f912490000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffffe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/39926]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='&&\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001a0000000000000059dbdf258000103fff01ff0500000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40884}, 0x8805) writev(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)="110eaa1a9896d57019effc8c79961d0f73ccf3afca3754e2e7a31f536bcb7204bed59311e29c96e1c2b663d61e5b0c0a76ea50cbddaa69f578b8600f77cf1a538ac900673696245b6de4283c979a2eccd71f9583dacf650575d1398678895da32663735b4d0cabfe7e972e59c2b4b4c9c89d0b82ca2267ad5062303e8abcb79600010506702eb912e3957e507aec4e2180699a738f6753509a12282a1d7181887f6c2e03de1da0dfe3b4efbb10e9b59301b4ef8a1d", 0xb5}, {&(0x7f0000000980)="34c30d95766fefbb7bdc40a3242505587bbc8584c2bc2003185f5ce116eea020efa91e2aae1eae2b8e848ac13c3dcedbbbc82adb1e70be8eecedba37be82545f2abda4f0a0e0fd0edd6bd03bb8e9bb91c39a2c828511aef3e684ad4c21ec0c146b9570139e31cd", 0x67}], 0x2) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x44, r2}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xdc, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x242b8, 0x6aa0a}, [@IFLA_LINKINFO={0xac, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x9c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x88, 0x10, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200004, 0x23}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3fc, 0x39e4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7ff, 0xc73}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd1e6, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xcaa3, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xfffffffc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0xa1ae}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x45}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0xdc}}, 0x0) 00:37:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5501, 0x0) 00:37:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600049000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:45 executing program 3: perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="00424541303101", 0x7, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e757855444600", 0x62, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000feffff", 0x1b, 0xa4000}, {&(0x7f00000003c0)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000000500)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="0a010300ed000100c6e7d0016000000000000000040000000100000400000000000003000000000000000000a53c000002000000000000000801000000000000080100000000000000000000000000000010e4070913122c1643092d0010e4070913122c170936350010e4070913122c1643092d0010e4070913122c1709363501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000000000000000000000000000008010000010103008500010033d418006000000001000a0000020000600000000000000000000000000000000101030087000100e81d1c0060000000010002060002000061000000000000001000000000000866696c6530010103009e0001001ffd1c0060000000010000060002000067000000000000001300000000000866696c6531010103000900010097f01c0060000000010000060002000068000000000000001400000000000866696c65320101030028000100c3e31c0060000000010000060002000068000000000000001500000000000866696c653301010300e4000100b7a72000600000000100000a000200007b000000000000001600000000000866696c652e636f6c64", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410481, 0x0) pwritev(r1, &(0x7f00000014c0)=[{&(0x7f0000000080)="d69f2271", 0x8800000}], 0x1, 0xd00, 0x2602) r2 = getegid() setgroups(0x2, &(0x7f0000000180)=[r2, 0x0]) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x1ed, 0xa, &(0x7f0000000b00)=[{&(0x7f0000000180)="15ebadffa35b76d6423299ffb940cfddfe01d3155848daa921f2a2befa4eae90a46d2489ad8a7d0c95704a88fee7ec084246cd6578e48337d75ed9a281b329e22d26d62936a88dde0f64a4fb7471d04bbb9625305df6f30aebd46a1d2ea3820df8a73afd8808e837f72a744cbfc0b3a0a6d8baaf4a1e8008d8b75aed2b", 0x7d, 0x1b1}, {&(0x7f0000000480)="20ef10ebd26d94225fb6dacc88d771f7b925498df50161dc50765352b7eb020924e4300bbca9cd78ae7ef0486100dd16df50a06fc5ba323664190b045e80ebe6a4626c0160a7df", 0x47, 0x1}, {&(0x7f0000000600)="562b85d076ecf210741a4ef2e4a65f89a3432b9c87e4b7a641f189d39dbd393a7e726e93ed39ff877d7b1192fb6014b2425467bf407e0979546cef43beb074186b31c15064b5e4f173852ede7d12de9b1abbb1c630fae8b3c7a5c0d420c9b7b888584424ad883f87bfa3864e972c5b1e2ef0b70ccafa71", 0x77, 0xffff}, {&(0x7f0000001500)="246d3f82cc9f074b30f9cc2153d89be7d5e515ad3b9c948002325334f4d6ce30fc56f879409f408198877393530d82a77200bed9f4040fa654b40bdfe6e30f28346fd8f72f71601f782aaa4935da68c66a5a5d317facab66169142c9acf33921582f0633b4df78b32380b0039d1cd8543f05a09fae26044fca0c5004cf5826b50e7c808c952fbf007212c53f02a2c172ae52d0580bcad7359a8f4e953adbba367d2b527403fc73d48d954c3bb53dc72d9a3b9a4b3bd4492cc7bfa6841faf5023eeb088ad47f844c5fba01ce8f7ea97593b763ee028d1925ef7ec4632afdef06b44d346786a3687a9c055a24148302c3d196eacb8fe8e072c420e9831eff79940f8121cd8ac8bc4724a8519464bab66763bfaaf711ccc58471b0df7cdf56930e4c27e06074ff997e32f93d6c0587e8359ae09eb68c4c99d286da0c9ba61b985662aa9d81db29786c2cf37e232b60f19b7b5127f3c9b2ae5d1f0c3e5406e65375fb97446329b9cdb4ee82389ea04aa7b410a8f2731a8009e3867c42689bd4c67f7d448dd57fa9b5147fa8a8f7da9f24670fd2e6c9078689c5422d2c8a00b8a7a336967771ae501cb3812ea05a1e8f2c7bc3fa1108280c0a5404d3c143c83173da444798b3bba008f7c622cd8b1887d303b0a9212f5afa89f240016a12aaeec62ee84c046b4cd1ae1077945df2ad90e6893ae7070ce5c22dcc99b492940fe826aabb087029af2fe1684a854a0939103a9db945fd15d57b50418de3ac8d7f6c0c4d2a8fd4b142601bdcccd49ec74e0d4044aa07445370238ad5e88f068f68a0f370cb2f32e99f104515dccf4ee61e6bcd7b357e2b5a218232e8dc62bd58df5d2d53e24f5954bdba37515cbbde539190a4d0c44cf2281cf301dde803b587ec0d3db7898020967d0e98236c0da587a9640f3d9f79321d25c0942a5fc056a7560b81b7adfd5259b01d987147fcc1cfe7a7451e48ec798f7c79168e2ca55b4b29422141fec46d5c462f874c9c0fe3fb1585c6b7ca9e4183961bf4f5989b230a80aae333eb88b1fa8246fa81236c655a4cd6f5e10405519527ea4507c96c7db19069345e6bf01e574cad0f66a5ee785df7dc6af04e64ad33d6e3c2add434ed8c043e227978b1d0d19559c7a00b9fa22c0c18e19ff48e6de73e6b960b5b8147b9b53d140491ee6ecaf6d8ae26eb42b31b026b64d517b5fac2d28f831946c6425dd5880fdcfc674ba622edc957812df7121385c481039d466b21834ea9023c28bdaa249ee108a4ad7727b66134d7157fcb0fd442c8982846bce316e11efd68a95b9331ca71e83cfb1d369e2cb12ddde3720857a6fd18c5e12c1c5e7ab78d7640d8b63b1d30b59d4fa3494a2df5006543fb95d0f641eaf13777ec50031db8de787fdfec0533fc4873c12d5b30749e4192fda9b501e316d251b9710c1c3cae5fe66602f47a3c878b86ffe544add63679c68c40ccd508488cf836535701044a6732409f6bb6bf47d71868d3dfdb98c091c00603e731e322a9e12bcc1f5c07b165b25d0ac237d9ebf8f9aab8ec8c0d9fb983e54aabb65eeb98fb549d149537eb8dd6b2f329061fdd97df99f2b3e7dd9e80cf7b7e0025b922f98d1121833f573b3dbb768e2fc2ff10e84e98cb3d500b8d910366bafa7948e84d081daaa29c49c3dda4d86c03550df7cb01d5dd282ccdde4c5eb7c760ad0fe003972c9f7976f913db36c2df25ab894c622aaee643bfd7635bd9e2695b1bd18db7b55c965b180608c5ed2ff8c3888fc20b97b48674737f2b6e6611e3ef1994bd3e65a991c1759034f4e8e9092b6cafe0793c01d7198d5439701fce0d5802c319011b03790bc2ca8b81c4efce620ed3ccb5d94e65ea939d142e6257d65613715d996abe74d8d57423f3ac50a0f72b2d7bd4946372b6a08f6416cfff3400b34bef3d9e11950df4556a0d6b144e7f0a124f09f048019c8b4b2653dbce8f6e2954748acba68db551bc128c0cd3a9a0899e7af3cb226ae9333ae6ed59b78f7fbfb77d7ecf8cf46138bb9cc55ab893ceff0b275717fef648c9779c76e8b743c0d86cb3e29de4556041638420aa343fc73da9772bb9ba1a68d108271afd5a4893b6bf2682cd4c2224fcb2038c097407083c14862b2eed02f78fef2b7880fd043b9c10a808c87adb779370d7c4b9f953ae5101d1b84bac37be72936e2866f140a0287575c195486041c10ada7a48c6091a88c86058a4644d96f0d33fcf7d5ac0c4b3e9c5042dc5ae69084c7b9cae3243db9a1fc9c16a9809a54d73b5b6f14605b2ea31ffcd9e156f9ef34edf4a7cc2e3be3d3ac7663d836632d42acf3099bbe12377429f4740439f02a0c5a268a46b2a461d613b9ce3af86694e225de29210baeb83ac385c2f8741c6e0e4a0a93a5489c749abb077197869806ed86510ba95645a2deaa422abb5139b70a4f56329ebd059e0a604937c80984d3ddfe4539c183455705092f43cdb3d49b00c35e2817b7a1b92c797652b988982208a5306f2c46e804114518e48c98f9f4143bcc050ecf0594983ebb9ee95a2f83571cd367c7159f0be311568e4db15beb7966e94eb3626fc3964d790608b9c10192456b45cb22114fc067025b53abf65acf9991cff762e495475f55cc8b43a21d823bad1be82216d60474e3f7afc597f4582689ea00a717252caab3bcf752eecf32cbeff187a1af671463be269b68f390d6fbc8420681deff744087895a63e229fc4f404b07ac14dc76b0a964b68786bdd72260a333307d608ff70dcbfa24de24644fb60986e553d1328e94e98ae766dd5d8e5d03509146e7c6ce4a46aad419ed6a708c131b94a09ae5530c03a0a35fa09506bf13745b8bdf3eb546e16a7b47084a6f98f9a10eb39d3004656f21ff9b23dcd4fadcf86936d9b786b798d3f025916ddca957794bdc8c60d76799e43f5e46bc992676abc38979a255ccf22ff33e6b6deb16bef33d9ddab5fe7a4ec92a098d22ca0602863ba5d298231af02c8224f44d8621a09f3b1ca6a0c8ebdd7942bcda2bfe864cb0230726f420f99dba2aadc12a3aadf9fe0aa99f7d89c40843fb6eff7dd9707c51194a3cee1aed046b75d700c3d2f29eee13cc1d9cc58363e340f367f0b51a24704465b5d912c653e551db5ef9329275048f5e20808bd1ee22f313131259f78338c2c9277ea9f16c1fee15a8895097f8c162c9bb11bb424f7f9bff264790fbd3c6c0f577ad9f2147fc063842c5742fe01e2214c6a3c4773f5687ea555254033e423e834d583775fdf6b90689aa2ddfa4333e0b1484f9b172e90ca830e0c30f47157fe9e7eca90f30a368133c4502d2e8faf11b8e83d19999a6048f3f2fcb142d7594f6ca532c5033d6624d1132533932496e3fb718b108a78825763930198b306fa5cfb4e55b66d538a9c614f6fe664e62502eeb374aae474f161527281389615b6dce3fedf690ccc104fd0145e81f3b9e63690ba3f07641b061cfa79954a1e900d3a8147cf2910ea7865e75a29ed00246861b692abc0975197d453385821d921c1cb58acb3348c84011c245df024b7f25e829de8a3cd08dd4127eeba451939e7aa0623efb98459cb262c5fb7688dc027fda9c6b275704d8ce83c30f64261863109c83a3bdb08f726334ab4fa5085e8a24960fb6dbed2100e45c96631707302f367925d2e2ce405c4703f912a16dd72bdcb51acf3af8adafd40208a9420515474486d05a43cab30315ed0cd9aec8c5b53c283127ceb99c7232728529e62d30329b7f47f73ecf49dc97aeb6e315da71057b4c312f8c4df54a1496f082ad1d741112ebc9d041043dde3b8d8283123ed27c9ff948843e674459f7cb9120cb4beaa6774435022fbde0a2c3d4561c2dbbf541241c7949dc68d00b506460897429eb81264ead0f8a245ac49fc73e6f6e327c1c9dc5bb32148f3b8bc4af103f1f4f7e9c996f2417f978413c02ac1341bd96ef81b147bdfe037ffc29dca5cab6b190ac4c46e490757eedabea2aaae1bc42f69b1cf26fbd042f8f9fb2657747bea89d8c964cedbd8d5fcd5a40eef90520b4affff2920035368d241dc0f7462941a29c409debd12dc86e5c40a9b50c44ce1d71e5346a584c741ebb09098b00435e2eb10707f3bf768a5f44b6922c38fb2f56c5d26371a693cbf1ef4233e840de97a72522878564341dd89b7d98b328d3368580056e022d7a4da2da9ee3e2cacdb14e266b471196c39cb08f9a1bbb44dcc473057d3414b6fb4eb3376568c83a0d8636b9eb64e6f4d15fa4433d08b517785788da784dd15439e45a386ba9dab5ee6683f794d78a6b05a829a45cfd90c1b055273f8b1dff027bc7076fb9f19dd153ac965f80f0545a5b3af1958da4af3b1b6c548193f3d2624ebb318863c4676fde663f6088b738a7fa88387757dfc328bc27c0f31cb17e76cc48ca305a2f536ce5a972474d7992f43e31cfd3c1cf23bc42a0c97f9fc078873c541f73350e2d791ca8f535d4f6d0eefc0a24ad2d6d3d364fe8678c3b2b9d0376517880449aefc39c123787f508dd9678769a314b8936e25380047f50fe3d9f346f16854a519abcd1153b9bc749f4d387bd1755deb3d0eea37c7a14dca87043bd92554d02cd8d416dc3f1a43818b35cae391dfd13fd167e1e2361a8bf67b117245dac998e529fa5992674fdeb8a399b257ae89716a6375d3801a4557433d0d2ef440f6efd53c821e27ca112e502623504aa85e7117dc5f3ee81688ba1a50ccea338a2c1a1de090fc58f963f03b9417f72d8df8c4c038ba5df4c99bb7c257df4d90e1873031b8fd468dc763f90b521a38ec5c00b6c5cdb66aea34062c9ffc04ff342b0ccfc9e75ed72f33076cbe5a409fdba42cb5d5fb90e365f9f9052c7658df22b99c35f93e485f5f885f32388195b90d61fd2c13394f5e351c13679870813cd069bb7f243d06023f61c451c3ccf6a67a3cc562fff5ede8bee8720d032a24147a579215f69b4134dd12e811cd068e6cd1dd70bdf2e068871c488c307a9bf47289f296030fc3df516c648832f44cbe635fcf82a32417a72db1fa6796ceeb8b3e9c755867bf870040e8727109d86c9936ea0d3aa89b997a5e556811e46f9b95d83b8e2ea50d9b8d37a253a53f08799de2d487be0c956f581664d690e8dd40d7a64cc114a3527b8790c63442d920691839c02b2757193dd3f2a8f1b025d90b89c6b95347afc0a2e2e134503c1521d5a1c89e4d73e71abd9905ac775c3699d48f3c42f42a58fc5cf977475bf28488a6e60162aa2f0a323bca1acb6eba2a5a2fee5a35a067901149f7a9e55990faf0b7c47449dd95c8715001200ed75bb0595c30bbe871601655c797b8780245c17a0209e4b6c53a78f9ca003fcb55e6aacbad3de38469e1ba6cff1a29ba84b7ecce54038bec2d175e967de91751a4599816ce400554b82427cccfd4b8816ba6ec361c13f71001d333a4be71481899b04b90ec98726c4edd57716fb0568d7faba37fa566797a1b5f6e76758d7f6dbcdfabba29fbd3bdae2093269fb8fa7db4a5599c77033f54d6428f16c84f17bb1b9b96063d981c7ab70b0c839b4bfbbcba20004bfc6bd47f17d46f8c2fd1caf7bd0a4665fecfd542ca6791d7abb9e1ff106787cab1dbacca4bb8fa81b6bafe30d313c4ec57e486e2f9ea50c32f7247d23f67c58c6458caa636573d6dc7a4e1ddfb7620e705a6f89f56ad6fafc027305316340a1aa9ec1c6015274611e6aafda271076247c2e13c9e430b33b742296fb82a881f2c61564b457185f4e3bc4d5f45cdfc405d5f80d3f5979c3b8b9c70287925f62d551d74ca321a1b1", 0x1000, 0x100000001}, {&(0x7f0000000680)="65a209e5eb227c9dee5f34e6af0ab8d421f597a5fdd0cd047d9f6cc9f19b0263f7427e06c001e5f2255d6e9d3f5ffc3f8788d4ba3404144baddbd7af4e54b743517b59fa4ad4df2162719378a2c2573f2af747219b55fa6960df9a153de9e9fabe1d49752adcce1fb0957841eacfc12c003e1946d00c6fcf13fb22ec8900944d8a268186ddeff0b760957712283bc442df491b4b21a40f38e97221b49826540d", 0xa0, 0x7103620c}, {&(0x7f0000000740)="9320a00a80688ce4546133db82d38d5d3a7bf4ccdeea9d63f009a6e23930b5df249a4f580192dc453d6cd5d3d6f716cf4ce7244e23f0abb8bfbbd01974eeb5632a8d6c8fd0811c3cab18b501d9b9cbc8effc4e64f7995d96d3ba23070ebb5633095f6d4e2bc003ed753892b2193ef25bea4419b772a7ff2ddd4319769cf6203a15156f68e7a32f0040d736eb4dd1", 0x8e, 0x5}, {&(0x7f0000000800)="2387dd203c7781e149f964ee6abc18180591ed5a177e0e2b0876f21c14a67b6509b11d0c0f71cd10656548720ff721e35025b4eb2a20c33678888c540fe48a63cbbe79f428da3fd8cba3a3fd36de995bbdbd1bceeb05e05d3b511029cbe19b271b6011c7bcd16c49ed", 0x69}, {&(0x7f0000000880)="aaa19f25d6247b21ba0964c4066a6c66e111fada51553d71ad4e41f37178fba46a07ab984ffda4df99ed56d69d1e80db4b74dc11e106ce1c93f343637d14687c561c252ea7f6ef3cd242e2f07aff2bf1a63215efaffddc2cd1f9533def0e965a2397262e8425796a315a1ad591cb5ad4ccd2a6ecce273bd4edde93c60b7d870cb385f5a267b260cb1497f4da753ddfb16e5ab99beea415d43d65e845ad32406f2affc2eeba5c8cd2347425f55c7dba0f76d87c931bfd8a3d5da226cc7b9c5ba0561adcdd754aafd12f3a0d115b18", 0xce, 0x8}, {&(0x7f0000000980)="e993e625cbb30c2411eba078aef93d25edb4a3", 0x13}, {&(0x7f00000009c0)="66a2ca2642cfcfcab3eb2221c61e6382ac1db63bcd2988bd6bd63f93e9311d43d47d6e4487b9f363a5d825f107a886acb21d6aaa6451605d364ed541fc9e7d2b47f79c4faf931cf1c2281b197d689b266c18ec4acb78f0d02c1997718e77199e35fa87abab017dd0f3e3ed70e38c0f450765f071838b39664dee201bd9acfa4a2c3d0968b5db598fcbaa72d723a89f1138a87ac2c63d0b20d402e1e9fb2940cb6e560f175667c4f6a20383aaf65a1c5c8710ba74a770ddc4", 0xb8, 0x100000000}], 0x112a022, &(0x7f0000000c00)={[{@gid_ignore}, {@gid={'gid', 0x3d, r2}}, {@adinicb}], [{@measure}, {@measure}, {@subj_role={'subj_role', 0x3d, '\'-.)'}}, {@hash}]}) 00:37:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x22, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000b, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x31, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:45 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002440)="470f01d166ba2100ed0f01ca0f01720866ba4200ec0fc75c3f1e44f4640fc7b9000000006766470f38819792f803e266baf80cb8f60bfc8def66bafc0cb0c9ee", 0x40}], 0x1, 0x40, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000100001800000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xffffffffffffff54, {0x6000}}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0xcd, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="0f01c30f01cf0fc799d5000000b8001000000f23d00f21f835100000030f23f8c4c2319a74c0f066baf80cb8e080e58def66bafc0cb8af6ccb0eefc4c3955fcff0eaee1ae12a2000660fed2a0f20c035000004000f22c0", 0x57}], 0x1, 0x2, &(0x7f0000000200)=[@cr4={0x1, 0x40080}, @dstype3={0x7, 0xc}], 0x2) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x9) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 00:37:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004b000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x6364, 0x0) 00:37:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x240, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004d000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10003) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = getpid() getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x2}}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x7, 0x8}, &(0x7f0000000040)=0x9c) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_mount_image$squashfs(&(0x7f00000000c0), 0x0, 0x6, 0x7, &(0x7f0000002b80)=[{0x0}, {&(0x7f0000002680), 0x0, 0x800}, {&(0x7f0000002740)}, {&(0x7f0000002840)}, {&(0x7f00000028c0)="67b2249abe41fc6a0a034741e58be7571f8c8f195d4dbcea687be9cbdb39f42f5616cf9957a44c65912b37f6ed75692df33338dd026fa2de6bcc54d94cf9512cabbd1284ebb311a36bbcc242bfc5176751ce08810df6c023aaaa0c70665b1a61a76392825da1381f4da255ce7987081559f6f88613cf708669dec57425fbc351fb937b2f0a87b239ce2faa8f87a6d650173e78c8f2b891b3aa406b8676ff3fa58ec996d797a2e8a6a592ad010022048e7091c1da47dce35125", 0xb9, 0xfffffffffffffffa}, {&(0x7f00000029c0)}, {0x0}], 0x20020, 0x0) writev(r3, &(0x7f0000000340)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000002400)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x7}, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @multicast1}], 0x3c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) listen(r0, 0x1) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 00:37:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x890c, 0x0) 00:37:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004e000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x1d4c, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000d, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1410.374090][T12333] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1410.416997][T12333] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 00:37:50 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local, @dev, @val={@val={0x9100, 0x3, 0x1}, {0x8100, 0x4, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local}, "60dae38e5823dc19"}}}}}, 0x0) 00:37:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3a98, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060004f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8912, 0x0) 00:37:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000e, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600050000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:50 executing program 5: r0 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) r1 = fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005680)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/211, 0xd3}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000680)=""/218, 0xda}], 0x9, &(0x7f0000000840)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000001980)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/38, 0x26}], 0x2, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001b40)=""/138, 0x8a}, {&(0x7f0000001c00)=""/207, 0xcf}, {&(0x7f0000001d00)=""/148, 0x94}, {&(0x7f0000001dc0)=""/97, 0x61}, {&(0x7f0000001e40)=""/70, 0x46}, {&(0x7f0000001ec0)=""/68, 0x44}, {&(0x7f0000001f40)=""/125, 0x7d}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x8, &(0x7f0000003040)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000003140)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000031c0)=""/10, 0xa}, {&(0x7f0000003200)=""/202, 0xca}, {&(0x7f0000003300)=""/255, 0xff}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/53, 0x35}, {&(0x7f0000003500)=""/29, 0x1d}, {&(0x7f0000003540)=""/98, 0x62}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x9}}], 0x4, 0x4a4a111b9dd08bdb, &(0x7f00000057c0)={r2, r3+10000000}) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 00:37:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x2ffff, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = getpgrp(r0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x80, 0x7f, 0x3f, 0x2, 0x0, 0x80, 0x20, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0xb9d, 0x6}, 0x40100, 0xfffffffffffffffc, 0x0, 0x7, 0x7, 0x4, 0x2, 0x0, 0x2, 0x0, 0x5}, r4, 0x7, r5, 0x0) 00:37:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4002, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600051000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8913, 0x0) 00:37:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600052000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7530, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000090a050000000000000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a31000000000c0009800800028004000280140000001100010000000000000000000000000a"], 0x70}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000200)={0x14, 0x27, 0xca1ac799a84bf95f, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x800}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000c00)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x350a}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080011) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x10000, 0x84, 0x1, 0x10001, 0x8000]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbde}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044884}, 0x44001) 00:37:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000000f, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600053000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:51 executing program 5: connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @empty}}}, 0x26) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7f, 0x0) getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x40, 0x2}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) dup(0xffffffffffffffff) pipe2(&(0x7f00000000c0), 0x81000) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup(r1) socket$packet(0x11, 0x0, 0x300) socket(0x2b, 0x1, 0x3f) 00:37:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8914, 0x0) 00:37:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xc005, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x4c, 0x13, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2080, 0x8098}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_TXQLEN={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x4c}}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001900010000000000000000000200000000000700ac1e000108001e00ac"], 0x2c}}, 0x0) 00:37:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600054000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1413.595591][T12472] debugfs: File 'dropped' in directory 'loop7' already present! 00:37:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8933, 0x0) [ 1413.681036][T12472] debugfs: File 'msg' in directory 'loop7' already present! 00:37:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x300, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600055000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1413.853697][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x2000004e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0x7ffffffffe, 0x4) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x400000001, 0x1e9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x6) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) writev(r0, &(0x7f0000001700)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0xfb}, {&(0x7f00000014c0)="06cd009cd5837bcb89c6be726e142720b27e5880631478c210719cfb667b526b5886acb454a43630bf2ec69ffbc69d62195f319c4b43fa4b977899e4db274cb8bf3da0e829742cb60ca02f603cb5decfa7f94212721ee0c8d13207d4ec12c67081dc433fc9a5ab45183f71a1d031e0eadc41edc3c1b2de7a6df544b14b0afa9182e4de29db13ce70a1e38baf85a86e54ab5133b9ff5aaef1dcbd7eed8f649040168212aed61aceae4e300d2df7e542b6f312b8d9e04d8ebafe03bc5ca333b22736d0", 0xc2}, {&(0x7f0000000180)}, {&(0x7f00000015c0)="70e5578973c3ca17a03991acda96b4f9211875b1782ef4fd7668ced7b872f1439421dab033daf12398983010fe671a0499ae8c813570b32138ff70db9b4e69f02a99db7ce8de92a104d3d36f48a35cb46cdb41d51687aa01eb9c93d23c8fb9ba58e198cb4e8c8b100b2b7df9252e93bfd7ad2fef541df88fe7c4", 0x7a}, {&(0x7f0000001640)="0e0e2863839646796d5afec138770fbad82fc41ac1d26914ee00ebcb0bd3da507c8f7fca4a473e3d1663531453270a797f6697c74d03ec89db4de9f1988d80ec714b6bdd3b4700d8ad3fff4ab3c3eb194fa3465f8886dc0b92221749ee9323fde6f68b1ae44475a22c6b2cf82dcfe9715a22b90d05000eb9b90ae6db34782c58ccffe616e8", 0x85}], 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0xfffffd46, 0x81f4, 0x0, 0x1f4) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(r1, &(0x7f00000000c0)="fd866400494e71271d8701e71ca10e1f52e3db07381a7ba15657742e5e1d6c3da30b8c07d12c735db3d4f32dcf267efe6c91259c19325e34026d7de056c4e1a80bd7097b43806048d2", 0x49, 0x20000801, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x60, 0x4, 0x5, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x1}, 0x2624, 0xffffffffffffffff, 0x1, 0x5b484031c1506191, 0x40, 0x5bb, 0x0, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0xd) open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) [ 1413.942249][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:37:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000010, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600056000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:52 executing program 3: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.log\x00', 0x0, 0x0) mmap(&(0x7f00009ca000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/pm_print_times', 0x0, 0x34) r2 = syz_mount_image$f2fs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x100000001, 0x3, &(0x7f0000000d40)=[{&(0x7f0000000b00)="8129c59feaf170b3862031", 0xb, 0x4}, {&(0x7f0000000b40)="022246d3b2b59203e1a52fdd06bbb03bb41280db5e34369c8b9776996df5d66667455dbd31f717c3cdb5d11445afafb3796ffcec7deb4f0f5453f0b669b40cf676bfc71aca1a67f3ff0bce8dfcf881330273fe96a0421f25c1c26ad5d429f20e9b71b5145f2f51ba4aa2f40dc8838b1798f9589f032afbcb3943cac0d018acb1e1ec4306f2c0fc10fe698587296529c34fa768759c60ae0b5089d0aa2286b9a39cacdc6cf3d90db2f7be83b0882d509ccba4edd6df295081404a42a85cc62bd9f0a732d7f4a0756124eb644148d2e864f0b12834cefdde244a599605c449cf3cf1c9a4343600953ef037e7", 0xeb}, {&(0x7f0000000c40)="641227b4ee93bea952e41e8c01e043a4d9fe56a9b55be25702c88b30a397e279398b58d6394b1d839b05537a46857e3d0b63348d016e7f4429d6b97bd7dc75fb53328f1b374ec4d93c142572a0de9f47c6e119fdc8c066d31cd445774c24d53437f02e923e5256f5d6f86b12eb641b2a5ecfced554866f791143dc2a3344e677574cbeb270c12cd6653ddf9aac45c017614f78e44a4518203b9e8b6e14e29f10527c95192353f9db2e60956c2ef2ac991574b9666772b44be0184a5f104a0fadb98ef565eb7f46266ae714a64fbf9ae5a0cafa70e85bbf5163e93082127651f7dc1e1d8c5808", 0xe6, 0x600}], 0x4000, &(0x7f0000000dc0)=ANY=[@ANYBLOB='prjquota=.log\x00,background_gc=sync,grpjquota=.log\x00,func=PATH_CHECK,seclabel,context=staff,\x00']) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000900)=""/237, 0xed}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001240)=""/181, 0xb5}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/58, 0x3a}, {&(0x7f0000001380)=""/88, 0x58}, {&(0x7f0000001400)=""/213, 0xd5}, {&(0x7f0000001500)=""/24, 0x18}], 0x6, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f00000017c0)=""/97, 0x61}, {&(0x7f0000001840)=""/117, 0x75}, {&(0x7f00000018c0)=""/35, 0x23}], 0x4}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/206, 0xce}, {&(0x7f0000002ac0)=""/126, 0x7e}, {&(0x7f0000002b40)=""/66, 0x42}, {&(0x7f0000002bc0)=""/64, 0x40}, {&(0x7f0000002c00)=""/66, 0x42}, {&(0x7f0000002c80)=""/157, 0x9d}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40010020, 0x0) clock_gettime(0x0, &(0x7f0000005b00)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f00)=""/10, 0xa}, {&(0x7f0000002f40)=""/142, 0x8e}, {&(0x7f0000003000)=""/26, 0x1a}], 0x3, &(0x7f0000003080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003140)=""/133, 0x85}], 0x1, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003280)=""/12, 0xc}, {&(0x7f00000032c0)=""/164, 0xa4}], 0x2, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/250, 0xfa}, {&(0x7f0000003640)=""/195, 0xc3}], 0x3, &(0x7f0000003780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003840)=""/91, 0x5b}, {&(0x7f00000038c0)=""/36, 0x24}, {&(0x7f0000003900)=""/9, 0x9}, {&(0x7f0000003940)=""/68, 0x44}, {&(0x7f00000039c0)=""/233, 0xe9}, {&(0x7f0000003ac0)=""/68, 0x44}, {&(0x7f0000003b40)=""/180, 0xb4}, {&(0x7f0000003c00)=""/183, 0xb7}, {&(0x7f0000003cc0)=""/159, 0x9f}], 0x9, &(0x7f0000003e40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000004340)=[{&(0x7f0000003f80)=""/130, 0x82}, {&(0x7f0000004040)=""/197, 0xc5}, {&(0x7f0000004140)=""/19, 0x13}, {&(0x7f0000004180)=""/128, 0x80}, {&(0x7f0000004200)=""/2, 0x2}, {&(0x7f0000004240)=""/165, 0xa5}, {&(0x7f0000004300)}], 0x7, &(0x7f00000043c0)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000004500)=""/3, 0x3}, {&(0x7f0000004540)=""/66, 0x42}, {&(0x7f00000045c0)=""/176, 0xb0}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x4, &(0x7f00000056c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000005740), 0x6e, &(0x7f0000005880)=[{&(0x7f00000057c0)=""/119, 0x77}, {&(0x7f0000005840)=""/2, 0x2}], 0x2, &(0x7f0000005b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000200b071100b99629d5558416e804bf73264a23c03fa7ec67cded55b197f7b3507a0613a2eeea890f426cc5d9bccf82b5ecbf62b07b6a99ac21899116f0bde8a69b55c7650499961bd8fd3324af7440201386278a8ac1213f14c93e8280dae3798c55441fdeb8b19"], 0x28}}], 0x8, 0x2, &(0x7f0000005b40)={r4, r5+10000000}) fchownat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', r3, r6, 0x1000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000480)={0xffffabc2, 0x8b}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x96, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0xfc00, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1b, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x5601}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000140)=@phonet={0x23, 0xb, 0x5, 0xff}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000001c0)="9a09ef30bd8063f5aa20e07a355526af09a2c50944fd29592cfe84632b31953ba903f947e90cd2741a5d824530a184974208b2e540f6eb6faf74d8f5493ba75743844199c6166605afee8479adb56389281b2329e0b412ad7bb64efdbadb24e96f30356f312ebf69e7e15cfcbafad71055cd290dc7326b545ff056280c19e0a4985f2614768533a871b7c6a16761b80fb8b0bf6a942c7bcd501c16ff9cf585f9ee23da2a28", 0xa5}, {&(0x7f0000000040)="9a2f129d5972028dd3bec70020603561e92b3ca3b206f03f", 0x18}, {&(0x7f0000000380)="dc465a0af3ce39889e8cf72aba5212e67aa940f690eead3f54ec8949cf32cb2595b8c475b796d507577e9af867f340130b8be5c04b57f7d228930cb67e20b53105491a9d97eef526c36ce7747061b089b46c512291f395a1f36d9601f3036aab3987194ef080f41d9a1f76db37bcefa4d1bf1e5b230e74ecc4d0870053c3b24a4d0809485d8754e036661209789be4026735c2e97a65a5ab5afdfe09121fedf6e468971b5ee4b34e756d16a1545cab4320fb57baed1370de53dfda9eb12ae87159210dee4e2ee720fb4deca12a2d91", 0xcf}, {&(0x7f0000000500)="eebe4d7ec39eb043b2eb5f0988906635554a0cac26610311e91004c3c6ecf276d37119e7ca96c4179366802ad8c64c04fbac33a13463158278dfc859691639019602f50ba35c29867a126f417a353f02e073b4944fe468f2bf0861534ca181d5a16f4564527e30aa14b5046a577acff7dc54ebe98818107ee876d9316113c91ae2dd54f4b25fad5858184614c105b15e4b4f21e7bbfce0d7b253dfd09937b98b61493b6a0d3d281c5eeb23897485e57c28a0696bb2b87ba64b4158cf34696f4a7588af47b3927d8708b8a3828b15bfe898b7", 0xd2}, {&(0x7f0000000280)="1fe1af24ae12b4e5f63be292f0475c681779a702514a5856f32d2ccdcbd54b95b60ef56471e0baddcdb24f0c7c9ec207dc6a37f444e5af6e2a78a838f46d3b033c4c65a63b14", 0x46}, {&(0x7f0000000600)="701b4702c6c2fa241cdf36d28035f9361e20353c59fa43c750beefa3bb4e54e58d7e704f0b23f85d702e631c78277f7e8dbe353f74add244c48a3e8acb2000e4c96c7daec3d0ab4f815e77b9f6852e76c97cbcba0a7477efd7a2aca289c231579b2f2d3e3d17262cca166f288b22003e5a2325d5ac8d7d50eca583136b59fb3baef154db3ece270fe869208285aaf52eef7e0019e0107264bbc314c5df639c8011cb3d74f7603dda4b875cc9620e013ab3", 0xb1}, {&(0x7f00000000c0)="76a56e76fe65fc791a530c3f", 0xc}], 0x7, &(0x7f0000000740)}, 0x20048811) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x59, 0x9, 0x7, 0xff, 0x0, 0x3, 0x13020, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6d, 0x1, @perf_bp={&(0x7f0000000740), 0xc}, 0x10, 0x1, 0x5, 0x6, 0xff, 0x3, 0x7f, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x3, r8, 0x0) 00:37:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x500, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1414.141304][T12500] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:37:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600057000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x89a0, 0x0) 00:37:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9829, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600058000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600059000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x89a1, 0x0) 00:37:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005b000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9859, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x89e2, 0x0) [ 1415.475006][T12514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 00:37:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "b67d5166ab9c79"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000029473c9e0000a6e300000008020300", @ANYRES32=r8, @ANYBLOB="27a2aaa59a401623"], 0x24}}, 0x0) 00:37:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000011, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x500}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x89f4, 0x0) 00:37:53 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x2, 0x7d, 0x9, 0x0, 0x1949, 0x22001, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0xf3ed, 0x401}, 0x0, 0x0, 0x100, 0x3, 0x400, 0xffff, 0x800, 0x0, 0xffffffc0, 0x0, 0xb5}, r2, 0x6, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x2, 0x8, 0x9, 0xff, 0x0, 0x200, 0x2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x20080000}, 0x40080, 0x2, 0x8000, 0x9, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, r1, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock2(&(0x7f0000033000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f00000c4000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00d00, 0x4, 0x0, 0x0, 0x2000000000002) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x1, 0x6d, 0x0, 0x0, 0xcf, 0x4005, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_bp={&(0x7f0000000080), 0xc}, 0xb, 0x2f9, 0x3f, 0x4, 0x741, 0x80000000, 0x800, 0x0, 0x7ff}, 0x0, 0x0, r4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r5, 0x0, 0x0, 0x0, 0x0) [ 1415.822723][T12514] syz-executor.3 (12514) used greatest stack depth: 21696 bytes left 00:37:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005d000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x600}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1416.172847][T12630] mmap: syz-executor.3 (12630) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 00:37:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005e000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xaece, 0x0) 00:37:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x902}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060005f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1418.197101][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.225106][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "b67d5166ab9c79"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000029473c9e0000a6e300000008020300", @ANYRES32=r8, @ANYBLOB="27a2aaa59a401623"], 0x24}}, 0x0) 00:37:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600060000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xb704, 0x0) 00:37:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000012, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x903}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:56 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fff, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x8804) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200002) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000200)={0x14, 0x27, 0xca1ac799a84bf95f, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40051}, 0x2000c080) sendfile(r2, r3, 0x0, 0x80001d00c0d0) r5 = syz_mount_image$ntfs(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x4, 0x5, &(0x7f0000002480)=[{&(0x7f0000000240)="4e83bced6e7d185e498971beee66ba21ee74f7f421b83572a4ea46939b128f15de0d9ce57cdc8084eac687aa1a3e8af70c2116049a2f8be101d78c459e24d6a4f167a03971c5d3f67e129c5ae9435fbbd540aee4f098b7bc2bb154ba4c07849e3c0010f2037c9b3f87355974cdcd1e7a6a1dd3c9db0a26639397fa68f43b883db0bd1f39e812d6cb13d41cc4f8a335c0508dea58b9e24f1169b957e52f8bc2bef8465be6e30c6a8c5da838243d1deafb450732605da0ad4c096bf693ff6a747cde15a32d65c17d72cff22ed81e1480a629ec1144b048ac088ae98afa1d9a80abba0ebb9fd3607b24d72d92", 0xeb, 0x5}, {&(0x7f0000000340)="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", 0x1000, 0x80}, {&(0x7f0000001340)="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", 0x1000, 0x5}, {&(0x7f0000002340)="3d272f7c96d2e02f133bfaca38582952d7ec", 0x12, 0x8001}, {&(0x7f0000002380)="9ed191801c577feb9eef1cf7cfd4aab2c01b284824b3c6532c49e8ea444613a8b107226ba569d0d7680b61b7f5f543c8846ee2dcbe661471554f7edd266b3441148a8a574f0ea0013e52f5c4bddb71b9c6c39fa6e5b88ea0d27195ba3aaae93b12cdab645d9f97108c84ca5e7eafdd04959c6ddac2d53c841009d42d467b4b5e50837b25909449f80fb6f145d2d6d1857c271f99157b7d083a13ae5da4c5ba7bf6c171c3c0f6d8942305f3d06eef6dc6216c8e3c8b88bf16e09984ba49c9ca180e8df12a44698c164440b0823862af7f26989ad3", 0xd4, 0x40}], 0x1000000, &(0x7f0000002500)={[{@case_sensitive_no}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x2163}}], [{@fowner_lt={'fowner<', 0xee00}}, {@fowner_gt={'fowner>', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/dev/input/mouse#\x00'}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, ',.'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) mknodat$loop(r5, &(0x7f0000002600)='./bus\x00', 0x80, 0x1) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r6, 0x0, 0x401ffc000) 00:37:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600061000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x904}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40042408, 0x0) 00:37:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600062000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x905}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600063000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "b67d5166ab9c79"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000029473c9e0000a6e300000008020300", @ANYRES32=r8, @ANYBLOB="27a2aaa59a401623"], 0x24}}, 0x0) 00:37:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x3}, 0xffffffffffffff8d) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getpeername(r1, &(0x7f0000000040)=@ethernet={0x0, @local}, &(0x7f0000000100)=0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 00:37:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000013, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:37:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) 00:37:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600064000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:37:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x906}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@getlink={0x40, 0x12, 0x20, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x62041, 0xe20}, [@IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_MPLS={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002580)={0x0, 0x0, "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", "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"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="4788e548b819cdfeb8000000000f23d80f21f835800000a00f23f8c402fd338302000000123e3664450f01c33cc33c430f795835c74424002d010000c4c27d1d6cd1ce44d8c70f08c744240011000000c744240200000000ff2c2466baf80cb8ba7e6983ef66bafc0caa66b87f008ed8", 0x70}], 0x1, 0x40, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a31f025e786cf08000000489d83364589bd8cc84769"], 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) 00:38:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600065000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x907}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 00:38:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600066000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x908}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1422.621297][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.627664][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 00:38:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "b67d5166ab9c79"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}, 0x0, r5}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000029473c9e0000a6e300000008020300", @ANYRES32=r8, @ANYBLOB="27a2aaa59a401623"], 0x24}}, 0x0) 00:38:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600067000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000014, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 00:38:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x909}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x908}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600068000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x90a}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 00:38:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600069000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x90e}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:05 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xf2}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = fork() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0xff, 0x4b, 0x81, 0x0, 0x5f5f, 0x20082, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x0, @perf_config_ext={0x7f, 0x40}, 0x10820, 0xffff, 0x2, 0x8, 0x3, 0xfffff536, 0x7, 0x0, 0x5, 0x0, 0x40}, r0, 0x1, 0xffffffffffffffff, 0x9) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) preadv(r4, 0x0, 0x0, 0x0, 0x7fffffff) getpgid(r1) waitid(0x0, 0x0, 0x0, 0xc1000008, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, 0x0, 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000eeb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x20}}, 0x8081) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3ff) close_range(r2, 0xffffffffffffffff, 0x0) 00:38:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000015, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006b000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae86, 0x0) 00:38:05 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000300)=0x4b2a, 0x4) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000272ca8725264be5176f6b66daac8005ff9000000000000000002000280"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getnetconf={0x14, 0x52, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8004) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9b}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000380)=""/148, 0x94}, {&(0x7f0000000440)=""/237, 0xed}], 0x2, 0xb438, 0x2) 00:38:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x90f}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x911}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006d000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 00:38:06 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fork() sched_setattr(r3, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) getpgrp(r3) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="930000003000ffff000000000000000000000000700001006c0001000b000100706f6c6963650000400002803c00010000de4a9d0000"], 0x84}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = signalfd4(r2, &(0x7f00000001c0)={[0x4f8]}, 0x8, 0x800) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@gettfilter={0x64, 0x2e, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0x4, 0x772920e05ea50ab}, {0xfff1}}, [{0x8, 0xb, 0x7ead}, {0x8, 0xb, 0xed}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0xd6ed}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x62d}, {0x8, 0xb, 0x783212e8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000200)={0x14, 0x27, 0xca1ac799a84bf95f, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x3c, 0x28, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x9, 0xb}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x49}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x4008080) 00:38:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006e000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x9, 0x2000000a}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfd, 0x4) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) close_range(r1, r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) listen(r3, 0x1) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 00:38:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 00:38:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x915}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060006f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000016, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:07 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fork() sched_setattr(r3, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) getpgrp(r3) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="930000003000ffff000000000000000000000000700001006c0001000b000100706f6c6963650000400002803c00010000de4a9d0000"], 0x84}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = signalfd4(r2, &(0x7f00000001c0)={[0x4f8]}, 0x8, 0x800) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@gettfilter={0x64, 0x2e, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0x4, 0x772920e05ea50ab}, {0xfff1}}, [{0x8, 0xb, 0x7ead}, {0x8, 0xb, 0xed}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0xd6ed}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x62d}, {0x8, 0xb, 0x783212e8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000200)={0x14, 0x27, 0xca1ac799a84bf95f, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtclass={0x3c, 0x28, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0x9, 0xb}, {0xfff3, 0xe}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x49}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x4008080) 00:38:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600070000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x92f}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 00:38:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600071000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:07 executing program 5: syz_usb_connect(0x0, 0x533, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/1331], 0x0) 00:38:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600072000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x948}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000017, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40087703, 0x0) 00:38:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600073000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x950}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1430.449647][T32202] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1430.822442][T32202] usb 6-1: config 4 has an invalid interface number: 151 but max is 0 [ 1430.865811][T32202] usb 6-1: config 4 has an invalid interface descriptor of length 5, skipping [ 1430.969079][T32202] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1431.026258][T32202] usb 6-1: config 4 has an invalid descriptor of length 136, skipping remainder of the config [ 1431.132539][T32202] usb 6-1: config 4 has no interface number 0 [ 1431.139049][T32202] usb 6-1: config 4 interface 151 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1431.152926][T32202] usb 6-1: config 4 interface 151 has no altsetting 0 [ 1431.160441][T32202] usb 6-1: New USB device found, idVendor=1b80, idProduct=e409, bcdDevice=e4.2e [ 1431.170934][T32202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:38:09 executing program 3: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280008006800000825bd70000600030000000000080001000000956e0000fffbff04010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x6081) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00./file2\x00']) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xfffffffffffffeb1, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {0x4}, 0x1}) preadv(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000001340)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4, 0x81, 0x7ffffffe) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 00:38:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600074000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x954}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000018, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40186366, 0x0) [ 1431.459790][T32202] usb 6-1: string descriptor 0 read error: -71 [ 1431.496361][T32202] usb 6-1: USB disconnect, device number 2 [ 1432.209548][ T8215] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1432.590122][ T8215] usb 6-1: config 4 has an invalid interface number: 151 but max is 0 [ 1432.602467][ T8215] usb 6-1: config 4 has an invalid interface descriptor of length 5, skipping [ 1432.642129][ T8215] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1432.688647][ T8215] usb 6-1: config 4 has an invalid descriptor of length 136, skipping remainder of the config [ 1432.722375][ T8215] usb 6-1: config 4 has no interface number 0 [ 1432.749913][ T8215] usb 6-1: config 4 interface 151 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1432.796095][ T8215] usb 6-1: config 4 interface 151 has no altsetting 0 [ 1432.814880][ T8215] usb 6-1: New USB device found, idVendor=1b80, idProduct=e409, bcdDevice=e4.2e [ 1432.873071][ T8215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:38:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(r3, &(0x7f0000000300)='./bus\x00', 0x0, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x80c0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002600000227bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000438e046ef00495d2741b834d64037070000000000000075b48492003095c2cdbd804e6928afd9e062724450a4e6c25770f0e9a39a8e09d0c919b2c5cf3cd80943bf202634c70d2e7b3eec991ef66768611e27a807000010cbb3d01dafebe5032f34156744ff0cb0d0520d", @ANYRESOCT=r0, @ANYBLOB="e400cf38086434d5f91ce0ca", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="50000000100001040000400000000000000000006622dc469a647ef62cd02cd95ec7a4e05c75cd8edf0ee546135309f119c4a517b84b44fd96e4ddeabf8ef7cb78e0a258aea2373f837b957c11d5548a2341b6a5b65b08151858748ab944eb80997d8782721a49d764a66e49b6ac10e6f825898b0658e482797f025464554dab149fb0065df6539d0135aebf18931e3898cc8704718ade0b79686561adad00"/174, @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200e0000001060008001900000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="6936ddac088c6866a3ffea991eed095aecdb0a8e8ef149bc2d4a9d3e942fc900000000000000"], 0x50}}, 0x0) r5 = socket$inet6(0xa, 0x0, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x20, @empty}, 0x1c) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @nfc={0x27, 0x1, 0x2, 0x3}, @nfc={0x27, 0x0, 0x1, 0x5}, @can, 0x9c4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='ipvlan0\x00', 0x6, 0x80000001, 0x9}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x44) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e24, 0x800, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x8}], 0x2c) get_robust_list(0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) 00:38:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000022, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x9fc}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600075000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x401c5820, 0x0) [ 1433.039523][ T8215] usb 6-1: string descriptor 0 read error: -71 [ 1433.095508][ T8215] usb 6-1: USB disconnect, device number 3 00:38:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600076000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1433.306741][T13030] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 1433.685941][T13036] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:13 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028000050240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 00:38:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060007f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 00:38:13 executing program 3: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280008006800000825bd70000600030000000000080001000000956e0000fffbff04010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x6081) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00./file2\x00']) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xfffffffffffffeb1, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {0x4}, 0x1}) preadv(r5, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000001340)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4, 0x81, 0x7ffffffe) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 00:38:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xa00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x2000003e, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1435.657227][T13073] loop5: detected capacity change from 0 to 6 00:38:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060008f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1435.751560][T13073] FAT-fs (loop5): Directory bread(block 1282) failed [ 1435.885011][T13073] FAT-fs (loop5): Directory bread(block 1283) failed [ 1435.934164][T13073] FAT-fs (loop5): Directory bread(block 1284) failed [ 1435.995616][T13073] FAT-fs (loop5): Directory bread(block 1285) failed 00:38:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 00:38:14 executing program 5: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) syncfs(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(r1, 0x4b4b, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000000200)={0x14, 0x27, 0xca1ac799a84bf95f, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x207, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x80080) 00:38:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006000b8000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006000ff000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41015500, 0x0) 00:38:14 executing program 5: syz_open_dev$vcsa(0x0, 0x0, 0x4) r0 = fork() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x9, 0x6b, 0x3, 0xe1, 0x0, 0x6, 0x14000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x2, 0x2}, 0x2, 0x7108, 0x3, 0x7, 0xfffffffffffffff8, 0x8001, 0x3, 0x0, 0xfff, 0x0, 0x20}, r0, 0xa, r1, 0x6) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="4a465331010000006076000000000000001000000c", 0x15, 0x8000}, {&(0x7f0000000540)="10c46404000021000000200000000000008e494506526952b76f85d92ad305000000", 0x22, 0xb200}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="405f144265b4bfb3f60b92b10008b67314d277a9a8d5ebaf2f4a574b2bae72e2734adf2fafae73cbb4c745b0f007ca9f00000000000000e6b10040875cf81e7f33c115f28bdf"]) 00:38:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xf00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20001d4c, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1437.030653][T13117] loop5: detected capacity change from 0 to 178 [ 1437.393107][T13117] jfs: Unrecognized mount option "@_Be´¿³ö ’±" or missing value [ 1438.748167][T13078] syz-executor.3: vmalloc error: size 499712, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1438.779891][T13078] CPU: 0 PID: 13078 Comm: syz-executor.3 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1438.789909][T13078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.799993][T13078] Call Trace: [ 1438.803295][T13078] [ 1438.806242][T13078] dump_stack_lvl+0xcd/0x134 [ 1438.811049][T13078] warn_alloc.cold+0x87/0x17a [ 1438.815755][T13078] ? lockdep_hardirqs_on+0x79/0x100 [ 1438.820982][T13078] ? zone_watermark_ok_safe+0x290/0x290 [ 1438.826576][T13078] ? __vmalloc_node_range+0x574/0xab0 [ 1438.831981][T13078] __vmalloc_node_range+0x883/0xab0 [ 1438.837222][T13078] ? vfree_atomic+0xe0/0xe0 [ 1438.841756][T13078] ? __snd_dma_alloc_pages+0x50/0x90 [ 1438.847125][T13078] __vmalloc+0x69/0x80 [ 1438.851220][T13078] ? __snd_dma_alloc_pages+0x50/0x90 [ 1438.856598][T13078] ? snd_dma_vmalloc_free+0x40/0x40 [ 1438.861824][T13078] __snd_dma_alloc_pages+0x50/0x90 [ 1438.866986][T13078] snd_dma_alloc_dir_pages+0x14d/0x240 [ 1438.872480][T13078] do_alloc_pages+0xc2/0x180 [ 1438.877106][T13078] snd_pcm_lib_malloc_pages+0x3e2/0x990 [ 1438.882776][T13078] snd_pcm_hw_params+0x1408/0x1990 [ 1438.888016][T13078] ? snd_pcm_playback_open+0x130/0x130 [ 1438.893498][T13078] ? snd_pcm_hw_param_near.constprop.0+0x6ca/0x8f0 [ 1438.900100][T13078] ? snd_pcm_oss_disconnect_minor+0x370/0x370 [ 1438.906205][T13078] snd_pcm_kernel_ioctl+0x164/0x310 [ 1438.911427][T13078] snd_pcm_oss_change_params_locked+0x1936/0x3a60 [ 1438.917893][T13078] ? snd_pcm_plugin_append+0x190/0x190 [ 1438.923409][T13078] ? debug_object_active_state+0x260/0x350 [ 1438.929245][T13078] ? mutex_lock_io_nested+0x1150/0x1150 [ 1438.934831][T13078] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1438.941103][T13078] ? __fsnotify_parent+0x498/0xa60 [ 1438.946330][T13078] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 1438.951647][T13078] snd_pcm_oss_sync+0x1de/0x800 [ 1438.956535][T13078] snd_pcm_oss_release+0x276/0x300 [ 1438.961781][T13078] __fput+0x286/0x9f0 [ 1438.965788][T13078] ? snd_pcm_oss_sync+0x800/0x800 [ 1438.970835][T13078] task_work_run+0xdd/0x1a0 [ 1438.975430][T13078] exit_to_user_mode_prepare+0x27e/0x290 [ 1438.981147][T13078] syscall_exit_to_user_mode+0x19/0x60 [ 1438.986632][T13078] do_syscall_64+0x42/0xb0 [ 1438.991077][T13078] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1438.996988][T13078] RIP: 0033:0x7fbfc78d0ae9 [ 1439.001422][T13078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1439.021059][T13078] RSP: 002b:00007fbfc6846188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1439.029505][T13078] RAX: 0000000000000000 RBX: 00007fbfc79e3f60 RCX: 00007fbfc78d0ae9 [ 1439.037580][T13078] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1439.045572][T13078] RBP: 00007fbfc792aff7 R08: 0000000000000000 R09: 0000000000000000 [ 1439.053564][T13078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.061549][T13078] R13: 00007ffccf6d444f R14: 00007fbfc6846300 R15: 0000000000022000 [ 1439.069552][T13078] [ 1439.176734][T13078] Mem-Info: [ 1439.180799][T13078] active_anon:3304 inactive_anon:203970 isolated_anon:0 [ 1439.180799][T13078] active_file:5900 inactive_file:78125 isolated_file:0 [ 1439.180799][T13078] unevictable:768 dirty:96 writeback:0 [ 1439.180799][T13078] slab_reclaimable:23087 slab_unreclaimable:102754 [ 1439.180799][T13078] mapped:21744 shmem:8953 pagetables:3045 bounce:0 [ 1439.180799][T13078] kernel_misc_reclaimable:0 [ 1439.180799][T13078] free:1187637 free_pcp:9633 free_cma:0 [ 1439.307708][T13078] Node 0 active_anon:13208kB inactive_anon:814968kB active_file:23480kB inactive_file:312500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86976kB dirty:384kB writeback:0kB shmem:33356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 403456kB writeback_tmp:0kB kernel_stack:14364kB pagetables:12176kB all_unreclaimable? no [ 1439.349500][T13078] Node 1 active_anon:8kB inactive_anon:912kB active_file:120kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1439.448232][T13078] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.486407][T13078] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1439.495463][T13078] Node 0 DMA32 free:783912kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:13208kB inactive_anon:814972kB active_file:23480kB inactive_file:312520kB unevictable:1536kB writepending:412kB present:3129332kB managed:2716688kB mlocked:0kB bounce:0kB free_pcp:33692kB local_pcp:13544kB free_cma:0kB [ 1439.584058][T13078] lowmem_reserve[]: 0 0 0 0 0 [ 1439.588831][T13078] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.676617][T13078] lowmem_reserve[]: 0 0 0 0 0 [ 1439.696801][T13078] Node 1 Normal free:3953520kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:912kB active_file:120kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:3712kB local_pcp:3712kB free_cma:0kB [ 1439.737029][T13078] lowmem_reserve[]: 0 0 0 0 0 [ 1439.743323][T13078] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1439.799013][T13078] Node 0 DMA32: 122*4kB (UME) 164*8kB (UME) 22*16kB (UME) 397*32kB (UME) 97*64kB (UME) 12*128kB (UME) 3*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 5*2048kB (ME) 182*4096kB (M) = 783688kB [ 1439.817887][T13078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.830429][T13078] Node 1 Normal: 144*4kB (UME) 36*8kB (UE) 25*16kB (UME) 160*32kB (UE) 72*64kB (UME) 19*128kB (UME) 13*256kB (UE) 3*512kB (UE) 1*1024kB (U) 3*2048kB (M) 959*4096kB (M) = 3953520kB [ 1439.865627][T13078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.880574][T13078] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1439.891050][T13078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.909070][T13078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1439.918393][T13078] 25430 total pagecache pages [ 1439.941026][T13078] 0 pages in swap cache [ 1439.945219][T13078] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.978956][T13078] Free swap = 0kB [ 1439.982718][T13078] Total swap = 0kB [ 1439.986449][T13078] 2097051 pages RAM [ 1440.051067][T13078] 0 pages HighMem/MovableOnly [ 1440.055776][T13078] 384534 pages reserved [ 1440.068237][T13078] 0 pages cma reserved 00:38:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 00:38:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600102000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xa00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20002ee0, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xf00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x1100}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600103000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20003a98, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 00:38:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600104000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600105000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 00:38:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600106000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xa00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x1500}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xf00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600107000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20007530, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80085502, 0x0) 00:38:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600108000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x2, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600109000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 00:38:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060010a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x7ffff000}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xf00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0xa00}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x3, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060010b000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 00:38:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x9) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060010c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x4, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x17) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060010d000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x5, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x801c581f, 0x0) 00:38:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) open(0x0, 0x202002, 0x2) listen(r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "d925723656ed8a8c", "215278dd3fffcdeb8e5c8151958fbac74d1c8bc070087a58ca31f3a9e2046e21", "82f4ed77", "593434460194be74"}, 0x38) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10012, r3, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) socket(0x0, 0x0, 0x1f) 00:38:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10003) r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x2000) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x0, @remote, 0x30}], 0x38) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd4, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x2010, r2, 0x1c34a000) 00:38:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060010f000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x13308) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x6, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 00:38:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x20b64000) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600110000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x7, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 00:38:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600111000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x40}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac1414aaacda04786f8914bb01000000070000007f00000164010101ff1700ffac141424ac1414"], 0x2c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x8, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:24 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010009040200120701020009058202"], 0x0) syz_usb_connect(0x3, 0x799, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x55, 0xb0, 0x8c, 0x40, 0x7b8, 0x400c, 0xc48e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x787, 0x2, 0x1, 0x1, 0x50, 0x80, [{{0x9, 0x4, 0x4a, 0x5, 0x10, 0x6, 0xa7, 0xb4, 0x9, [@generic={0x5d, 0x23, "5042a2010df90e368e4c26c3e8e82d89b0bf61776e23d3936771fcb966ebd218fddc5c229dd605a6ba5caec3393f9f31da7e151caa597f3f1b964286cc91868dd6b0fc29e5065d5a6ce587c50ab4cecdef1f8cce83da3e9498cbd0"}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x5, 0x29, [@generic={0xf6, 0x21, "d25fe756f2e549bf8cb6f027da878b4cf7a1c03c5df275d1ed9096d402acf1df5402b73ffb8c862c225f560a20c23059902ffb8da521096a38b7a273095f1c64c7ed50300601bbc749847504d2aaa81fe724d1a8d2fd8a598df17ad29ac929591fd98efffc04a3359a096ead3c50386107a33bbe72bf8ebb34e6a813188ef9ba371d0b0515bf482d1d3a0b6cdd5507e33a311c8d25e4757ae4a063aaf828b3cdfdd65e3304c9b0c1b3aed931113fd6c538543783e8274a8934a2cbfac60a6a541963da4a4ab71fc0252b4dcb8f1d29f2d6d32b3fee14bbcb9500ece11ba4fc0cc77cb2d7658dc15e0d6e29bcc42829cebb6581f3"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x8, 0x2, 0x1, [@generic={0x2f, 0x21, "44a7e2bc880c5a8f30dc3f858de0eca49a79c886b0a3d4f8783aac934472e13a3d215eaf7ac7421b48901900e9"}, @generic={0x8c, 0xd, "0fefa1a1282874fbf8dd30a46b7a7ebdb4a0aa0f78860e1e4af220751adc2a56a9acdaaa837b375fccb922933486894e7d0abcffefba0bbaa5b6ee37a22dc5bf09afc4718f1ac83e9e8a374b62d66ab7c1f020776ef795a8eb67745417eaa73c565ff30c33078404b137715cb4d1988699bc03706e6b94d8e1244e24a307f259e9d50ea554bb6d3eebd6"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x7, 0x8, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x3, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x401}, @generic={0xae, 0xd, "ec2cf3a5b6119c92817d2a2b3af369b7d08ed9d4c7d463db6909b60aacf0142ae05393cccab20bf60f4a688890d3bbdd5a7e0bff5350b5651ed7dfdd6278b378912f1f3f91a479edcaaef3573d9b8fda81fde0d964fd4159d8769ad1675e2703104bd1504f6feeedc76b24900ac7f7b98ad20ba3f376120b53a89db0650609c39e87a85504e1fec2725191cb71f09f5bbaa8e035f8e65465a25f5a6262eb7f43f417ce9bbbd23a29a37e92e2"}]}}, {{0x9, 0x5, 0xb, 0xb, 0x40, 0x6, 0x4, 0x3b}}, {{0x9, 0x5, 0xd, 0x16, 0x10, 0x2, 0x8, 0x7, [@generic={0x84, 0x23, "43786f8b2eebcb46090a5bcb8ff9461d7c603710998c16e62e56043f1bef9697f6508a8ef2670337a1c22a46a3a28fdb69ca10dd3b0af8d3416e98457e1ec1eca46a93f2dba1112e2f3346a2163eaaeb346e3ffa54ffba94790f0dbae0e794e4c387d341df3aa27afc2a197168fecbf0492c5a2b40142089aeaf7501c65f62436653"}]}}, {{0x9, 0x5, 0x83, 0x10, 0x20, 0x8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe1, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x71, 0x4}]}}, {{0x9, 0x5, 0x1, 0x9e255c4b838bd36c, 0x400, 0x6, 0x0, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x1f, 0x72, 0x4}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x8, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x9}]}}, {{0x9, 0x5, 0x80, 0x1d, 0x200, 0x3, 0xff, 0x0, [@generic={0x34, 0x4, "a6d955b78d0b11ffc2158cb78ab42ce8eea8622c271ff40e93e002189d8da3f8a9e294117bb49abdaff296d669c61431004b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x30, 0xff, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x6bb1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x4, 0x9, 0x9, [@generic={0xff, 0x10, "49c6392c11a3d368e22260c5e9166beb154fd29b9655c0665ee64517afbf9c9f1502d86d1d0666592de8915f67a51b98aba82e574dc3ca4babf026d4e145bfa22054e272a993b29b91e02f4f0ca771ec3dd20b9d21cc5ce7bbc73b0bdfd8bcb9a678d3ad20521dcedbccf67733b98b857ae8cdad5a04a5a54600b9653d3fd6361566392a2daf4e0ba5937b5ea0fff626b41d66e030d5e572c56724f09deed45239fc8324d88d3853246c12c293608223996baba5e528bf84221d5077ba7b8554272d7cf261a8322b76c430b058f4df27d23522595db3878f001e9d20113e4827141a77689765a26f21d4e0815b47227dff0158391f03b62362a5a487fb"}]}}, {{0x9, 0x5, 0xf, 0x0, 0xfa7f9923abfbd62b, 0x6, 0x20}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x1, 0x24, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xdb, 0x800}]}}, {{0x9, 0x5, 0xd, 0x2, 0x25c042b4d636afb8, 0x40, 0xff, 0x6, [@generic={0xa2, 0x22, "a82bc82c92f2a7f0eed616d52d010a05c41ae78ce9aaefc94ebf07548ad061ad472e7b0e99fe0b9c1cfe6da5773f904ca8ae9c00d216d962f65a118442c1c85eec1276606ec72d54484cbf7e76122d2f4f39d0073ddedc5965e10a0b5e5396b93f4339f7f7c560d81a033f48990ab5b95acf03d51e91db2fa969e34444aba2d012672bbb9379c6794fd121e1b92da21c9ff9b8db9cd96cf5e4ddbcf2fcbc059f"}]}}]}}, {{0x9, 0x4, 0xbf, 0x3f, 0x4, 0x4d, 0x34, 0x9e, 0x5, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x7, 'Hr', "758e8e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x2, 0x0, 0x43, "b3e3ad", "168b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfff, 0x9, 0x7f, "c48a3d17f8a10f0c4d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x81, 0x9, 0x9, "ac3e8d6273e272a3e6"}]}], [{{0x9, 0x5, 0xbdf61fb05e73d065, 0x0, 0x20, 0x1, 0x4, 0x7c}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x2, 0xc8, 0x0, [@generic={0x8e, 0x0, "0e1a14000736a23669b0be646473ea4f54fe256b5f7891a603d67d19d61a7e0c03c9565f568d0fe869c1edb6f8aab7e532b660b104926dfcb0e532e52befafaf5a3bfbe73bf4293c3bb48d7e29f5f98ce13bfabc4c57a1c1ab18ffc6036616c8b667ab8d3859fede486ad2a2fe2d93c149b85e19a9e640cb7903dba47e38f5138a85b7aa4fc4b0e21696bb9d"}, @generic={0x7c, 0x4, "2dbc788cecd0c05d2ac85c7d72e992ea18df2588d86d3e9dc2549f43c5429e8702ebaf0326cea9187fe664571cca0adb0efef52121fca4ddb69488fa91b5a0a8ab673288ef0fb4606b59d231ee814682b1c5221f65cf7c90ae531bfab10d6d67c78f69bae6129f1522d54cd45fb7b1473f779560f19d4dd654f3"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x6, 0xbb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7a, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x100}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0xcb, 0x20, 0x7a, 0xff, 0x3}, 0x2e, &(0x7f0000000d00)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x0, 0x59, 0xff}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x7, 0xf, 0xfff, [0x3f00, 0x3f00, 0xc0, 0xff0000]}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x41a}}, {0x2b, &(0x7f0000000d80)=@string={0x2b, 0x3, "88ddc7383f6fe04939324f25e6c25904c23d994069616f3099ccf69f6c397957be49f0c1576e0054d3"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x407}}, {0x32, &(0x7f0000000e40)=@string={0x32, 0x3, "c4725c62ad405e03e7abd17176496009f3d66a34914dc4d7d3986b9df5e706340cf5d75985d4e9553573dbf354a11da6"}}]}) syz_usb_connect(0x4, 0x36e, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xb2, 0x82, 0xca, 0x8, 0x9e88, 0x9e8f, 0x1da6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35c, 0x2, 0x4, 0x9, 0x80, 0xff, [{{0x9, 0x4, 0x3a, 0x4, 0x1, 0x75, 0xa3, 0x59, 0x1f, [], [{{0x9, 0x5, 0x7, 0x3, 0x200, 0x5, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x100}]}}]}}, {{0x9, 0x4, 0x5, 0x7, 0xc, 0x66, 0xda, 0x68, 0x1, [], [{{0x9, 0x5, 0x2, 0x0, 0x400, 0x5, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x51, 0xfffd}, @generic={0x89, 0xa, "6a13a2f8713b3cbad63b4b8d0a9390d009194509f2b5fe3200e75534304a0335007a0663579ebd6bd99c453e5a26f97cd142d5e962fcc71aef05671dcc827388caecc0609c9eb6d130f414b74867079bd3db81125a03981be8c8a710995a2287fc1b65b87410c29419e1a9f0e4de1a13291f6254ec2e7142c0fff86891a3f23692283b3778434e"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1f, 0x6, 0x2, [@generic={0x7f, 0x30, "2a2a4c34fc22868d40d51bb1e7184bfa8b0e49b331610ea990001bb80048628c86a56f09ccadf70344a69506c325fada98e23e9c4c91a192f99457a4d97c1d0acb3793e7e6be0ccdb139c79513434ebd2690ae33c33dc1b06792b54f715bf348abe109d93143b9189b9610bbdbf18a5f728c414ca3cbba6ebb1711704d"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x8, 0x8, 0x81, 0x40}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x40, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x4}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x6, 0x3, 0x4, [@generic={0x14, 0xa, "e729721d6cde789092daca82a9583e0d9c4c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x8, 0x8, 0x3f, [@generic={0xfc, 0x31, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x9a754b416e69b5d5, 0x9, 0x6}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x3, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x2, 0x6, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x81}]}}, {{0x9, 0x5, 0xd, 0x0, 0x630, 0x2, 0x5, 0x3}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0xff, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x800}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xfb, 0x65, 0x55}}, {{0x9, 0x5, 0xe, 0x1, 0x400, 0xbb, 0x3, 0x7, [@generic={0x9, 0x0, "a9293a4afbd882"}, @generic={0x6c, 0x31, "8a0c64fa00740e80db1ac862221a2088340b6ee6ce01e9ee798b17eb664455533ce70f3f86434d16fdbc96a5dd2e4b3ddd78aa5303ad3a78da614a5145e37a461c378dcbcb223ee5c52ea05ea0800a940b44c28ca26500232e15080d5d70291b651c10ef2d3fd75d2608"}]}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x200, 0x0, 0x3f, 0x1, 0x10, 0xff}, 0x1c, &(0x7f0000000400)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "4bc316a7df3b2db1c2cd8048810b9874"}, @ptm_cap={0x3}]}, 0x1, [{0x65, &(0x7f0000000440)=@string={0x65, 0x3, "66ad04850f190e2bfcb0f016f458be1c77ec32846edb902e7d859009371fa2e73043cc1775e670e001e8f5604741d8b5541d75cf075fff1bdc1f4e31a766d64822aa31fdd3284dad16a7b662035a4e6f22c303c691f4817d28afad1c7d753e5c3143fe"}}]}) syz_usb_connect(0x2, 0x36c, &(0x7f0000000f00)={{0x12, 0x1, 0x201, 0xc, 0xa6, 0x78, 0xff, 0x413c, 0x8115, 0x70d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x35a, 0x1, 0xff, 0x1f, 0x80, 0x81, [{{0x9, 0x4, 0xb3, 0x1, 0xd, 0xf4, 0xb9, 0x4d, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '^'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8000, 0x7}, {0x6, 0x24, 0x1a, 0x200, 0x1}}], [{{0x9, 0x5, 0x9, 0x8, 0x10, 0x1, 0x1, 0x4}}, {{0x9, 0x5, 0x6, 0x4, 0x8, 0x5, 0x9, 0x7}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x6, 0x9, 0x4}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x4, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf6, 0x1}]}}, {{0x9, 0x5, 0x5, 0x1, 0x0, 0x6, 0x6, 0x7}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0xb, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0xfff9}]}}, {{0x9, 0x5, 0xe, 0x5, 0x10, 0x4, 0x1, 0x4, [@generic={0xef, 0x22, "a6d15af344c76b64b0aa2d3e602cd5d0aabcf177d901f33b5a086356bfba424819c04caf6ba31eb73fde0ee6ebe79759f46299a045fb3d5979ff478b48a314868a20a0fc475eaa84447ed9746d4f0ccfdc78486ac08fb4cdb4d4b0796160ef810977395eaefba33f959ebdacb4e86d8a51431d5923d9e9514a5966e54facdcf69d52becd621f3112914a2a67b46386b1cbfd44cca1d19b96d766e5e05377b674a65333aa961c601b58b70d4b87368bff4922a80f1f33c523a62427f146a59c91784eb980f732fd16724c43311234d715e6e83cb4d24a8714855265d47833aa5083e965433eef5f25321bc7a683"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x80}]}}, {{0x9, 0x5, 0xd, 0x7, 0x20, 0xb0, 0x80, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x5e, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x4}, @generic={0x6c, 0x30, "20425f998cf343b5959ed6537567cae9e09caedb42d70bb9f34b44cf3bbf6fda740f20c6c41961c6cd94f4a731439ffea168a6700e79c0682422bc86c262e85b4941bfbad63cb5291b433a0146a28216cb591a691802f0d2d9add4bea90c24e81239f779ba73439c64ec"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x7f, 0x6, 0xf8, [@generic={0xbe, 0x10, "f182e3547f40ddffad6e622ec3850ca4e8f55382deca61ad0e6931d344ea2da736850a175f62f392a458c6944368054253dc05c6ff7bfe288b20841f868268bcca5f3ca6cb9432d32c576dedcfc8713f60a3d808359a0a404c37053deb661a24bd58da954091e7071beac60a8e03200353b1df350d4d339f072557524f160f071a2842c1875ad7e56c43fc20e77968fbf2eb89dde30d86c71c8a9268b994db0b9ce722decfb07a92ce367647f65497b24c1637ff17a2134d0f5e26d1"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x7f}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x80, 0x25, 0x2, [@generic={0x72, 0x24, "f265b83b563442ca581d58c34639801610c4f6a95dc6970928fc75503d1aa83f3c644cb23ef372f9b29340f75c218ad13108542952753361ce054c77947e2a1fea4d554fc118c4c0206d189143b7be75556a940f12add9dfc47dfe455a3d15ff060542404b937723d96f86ab6f6dc824"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x40, 0x1f, 0x9}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0x6, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x300, 0x4, 0x81, 0x81, 0x10, 0x2}, 0x3a, &(0x7f00000012c0)={0x5, 0xf, 0x3a, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x8001, 0x0, 0x0, [0x0, 0x77274b34fd097a1e, 0x0]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xa3, 0x0, 0x8000, 0xf00, 0x188}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6d, 0xa6, 0x2, 0xc000, 0xd7}]}, 0x7, [{0x4f, &(0x7f0000001300)=@string={0x4f, 0x3, "cc023800f7afe40e6f1e87754cbff95486461f40f902d9519cf5924f58631ba7e68abb95918ae23dac4484e95525026666099cafb854a0df9e9a17541065ab45d4df447570221037de97975d0a"}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0xea}}, {0x6a, &(0x7f00000013c0)=@string={0x6a, 0x3, "c63063d1cf4f8d45b9a28c47bc8d93c345b4e13a2407c62f499e717feecd136c5a8de4e23895f53213d7f82ad93c95dfbd034094b0fe5591fcc62d3177ef3fd5eba8949b572a01fe1f32b1ac8d6034ca84233873dca24b3ae814c475c339c4b99768da5a0e6bbe68"}}, {0xf7, &(0x7f0000001440)=@string={0xf7, 0x3, "b4df49dcf93394060d559069904969c18c08bf9744dba2377be5f1975fe83f95dc8da8c924d4d82f4bfa459aa27c9ebbb4ea706e8c484e2f3842765ffe9700d8e083c05ba11e8bfb5da0388412b2f3b46d929451b3d9299424fc0fdc31c8f359e78a24d90314741050bbb5cbb47379740df72fdecf1385bb15dae3f2f24f4fe68e3624f2d4720a52068b45b6305271cd91700cae8feab8e5126af87ba8b160b400b042526728b3d876f8aa59b57cd7a2ee9fa580ce5a600e894d14144b2b88d703fcb3ac4651861c0d01fd55af8bf5bc4fec7813f77d48700e7a143b10664846449c4b7b639d4ee90bfc9c6f7d2733b14d84e5580d"}}, {0xa5, &(0x7f0000001540)=@string={0xa5, 0x3, "4aa442ab3f3918834a83515eafc8e6a8aff40bd288d1e509e698852053058a8355a11074d1ef029ba5b74b7927d4852084d40e75017e0cc8ff9426c9770cc820c1fbb13fe48bd05805979c2112a7ffb70f5c73ee4b4c3bde3fb41ad29225522b06edb3d8fd9a3cbf7c97d1be7634bda50bac7244604158f408f7e640fab61a9429efa0170a0b223549f716ee87d2871712e4e9a1345e56adbd993e946b5ed84caa85af"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x438}}]}) 00:38:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060011c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x9, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @mcast1, 0x2}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) 00:38:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 00:38:24 executing program 5: mkdir(0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() setgroups(0x2, &(0x7f0000000180)=[r6, 0x0]) fsetxattr$system_posix_acl(r2, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}, {0x2, 0x6, r4}, {0x2, 0x0, 0xee01}], {}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}, {0x8, 0x5, r5}, {0x8, 0x6, r6}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x0, 0xee00}], {0x10, 0x1}, {0x20, 0x7}}, 0x6c, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 00:38:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060012e000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xb, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1446.891796][T13393] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1446.915048][T13393] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 00:38:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x5c, 0x0, 0x40, 0x0, 0x1e82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000180), 0xb}, 0x84, 0xffffffffe60aa3a1, 0x2, 0x9, 0x7, 0x2, 0x7ff, 0x0, 0x5, 0x0, 0xd15}, 0x0, 0x5, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r2 = accept(r1, 0x0, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x8, 0x1, 0x2]}, &(0x7f0000000080)=0x44) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1446.959270][T13396] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1447.005125][T13396] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 00:38:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81f8943c, 0x0) 00:38:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4000000000000073, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0}) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"81f5ccfc789f2e5f141f05c9c6e2afc6", 0x0, 0x0, {0x8, 0x3ff}, {0x8001, 0x40}, 0x10000, [0x7d, 0x7fff, 0x2, 0x9, 0x8, 0x80000000, 0x100, 0x2, 0xffff, 0xfffffffffffff801, 0x6, 0x97a, 0x7f, 0x5, 0x6, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"98dbb01066d8d82a6db5a104c7c92d86", r2, r2, {0x38, 0x48e}, {0x100000000, 0x7}, 0x7, [0x7, 0x0, 0x580, 0x100000001, 0x1c, 0x7fff, 0x1, 0x6, 0x7, 0x4, 0x236, 0x8, 0x1, 0x1, 0x4, 0xe4fe]}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000001440)) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r0}, r3, 0x8, @inherit={0x58, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000200000000000000010000000000000006000000000000003f000000000000002c0b000000000000020000000000e1020000000000004b2418b2a9270004a1bd"]}, @subvolid=0x63e}) r4 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x400, 0x82) r5 = syz_mount_image$zonefs(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0xb9, 0x4, &(0x7f00000017c0)=[{&(0x7f0000001540)="c72f47bdf93e494b2bb36bc6801a134d95174dbebf7b18504ef0d7291008add28e37e39809d6c569", 0x28}, {&(0x7f0000001580)="5cc79874d2fcc38f2b39c11d44bc9657522e1318cb527923ccc6e6647ddfca5b9a9aa0554c1d967c8b21c8f48024ede94a64a2ab99b6f6c3cad932c674ea05471800b69f01b059e125aa86d42e52631cbfb24ae611bee57c2012b0fba9b88409c48b0bb23a60b5f8138ff06c173bf1eb38962d6a1d3617aa166044d2b2100fe25283d95a456b86b2b24e08b9350889b76c7841a6e5340075ca739bab0dfa9e1902185115aa4b97eb570ed56a8615297a46d0d162a471ab101ef2977a78df240775c55d3faf8dde0eb150762e", 0xcc, 0x4}, {&(0x7f0000001680)="06cc25df9bd824eec28849ddb4db61454d8122a375a49c83479c8e4f37e6723aeda186ec7b052fc49a5d6ff4d2dcfd450af74934d7df08eacfab00f67d9f9891d3390714ce509b9cd0dad102aebfb0979ced4109dc04f0d65d10dc34af1342b7", 0x60, 0x1}, {&(0x7f0000001700)="553039f9f4182b81b2b2c57559035105124d52b57da26f57a6d57e49aea86d113d2421115e07fd374808a1686bf2bc382c1b6fab5980b3b23797dc06198f8c74445492728fa781b94f9d4ee3785ca8b70084db3d98825539b5e75ee48ad70ec94fa10d918840bc2e0f4fff13a3a3f4b9455ad582b04c0b88169db39cdfed97075d4d10f1cce18a296649a1ee05e6b0fe6e", 0x91, 0x7}], 0x3000, &(0x7f0000001840)={[{@explicit_open}, {@explicit_open}, {@explicit_open}, {}, {@explicit_open}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) close_range(r4, r5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"93568b78d95b342b8f89de8cb6b2130a", r2, r6, {0x8, 0xf6}, {0x8}, 0x0, [0x7f, 0x4, 0x7, 0x1, 0x80000000, 0x80000001, 0x1, 0x0, 0x5, 0x3, 0x2, 0x7, 0xffffffffffffff80, 0x2d, 0xa5, 0x8]}) [ 1447.048662][ T7932] usb 4-1: new high-speed USB device number 4 using dummy_hcd 00:38:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600135000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1447.248700][ T7932] usb 4-1: device descriptor read/64, error 18 [ 1447.518644][ T7932] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1447.718805][ T7932] usb 4-1: device descriptor read/64, error 18 [ 1447.839081][ T7932] usb usb4-port1: attempt power cycle [ 1448.248623][ T7932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1448.346402][ T7932] usb 4-1: Invalid ep0 maxpacket: 18 [ 1448.499934][ T7932] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1448.598875][ T7932] usb 4-1: Invalid ep0 maxpacket: 18 [ 1448.605607][ T7932] usb usb4-port1: unable to enumerate USB device 00:38:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, 0xffffffffffffffff, &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046) io_uring_enter(r0, 0x60c4, 0xec64, 0x0, &(0x7f0000000080)={[0xfff]}, 0x8) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x581c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x1fffffffffe, r1, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000001300)={0x1, r5}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}}) close_range(r3, 0xffffffffffffffff, 0x0) 00:38:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xe, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600148000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 00:38:27 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x5, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x1, 0xc4, 0x5, 0x5, 0x0, 0x1000, 0x40430, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x1, 0x2, 0x2, 0x8, 0xffffffff, 0x8ae, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0xf) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000000000000000400000010009000000000005000600000000000a0000000000000000000000000000000000002000000001000000000000000002000100000000009a00050b0000000005000500000000000a0000000000000000000000ffffff7f00000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'batadv_slave_1\x00', {0x1}, 0x401}) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="021100001200000028bd7000fcdbdf250200010000000a01010100000000000000000000000000000000000000000000ffffe00000011e00040002001000000004d3000004d40000000002001300020000002bbd70000635000004feffffffffffffff0000000000000006000000000000000500000000000000010016004e230000b47321cac71f5be1bd0f66d34b26fd04c880a1588c76f50e55266f483d8b2109867f4686"], 0x90}}, 0xc040) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000600), 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000500)={0x9, 0x3, 0x10000, 0x512e}) r4 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x5, 0x2, 0x88, 0xcb, 0x0, 0x1, 0x70005, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0xf5d2, 0x8001, 0x4, 0x8000, 0x81, 0x2b, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xd, r0, 0x2) sendmsg$key(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2, 0xe, 0x40, 0xc, 0x9, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@private=0xa010100, @in=@remote, 0x2a, 0x10, 0x20}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x48}}, 0x0) write(r3, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0xffffffff, 0x0, 0x3ff, 0x0, 0x3, "68c4941dc02980f27874f1c566670610da07aa", 0xce9b}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x11f08) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0xfff, 0x4) 00:38:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060014c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1449.884492][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1449.950572][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:38:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xf, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1449.950599][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:38:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060015c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1449.950622][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 00:38:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1449.950639][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1449.950659][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.950676][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 00:38:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1449.950696][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.950723][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1449.950742][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.950763][T13455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1449.950782][T13455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.971230][ T26] audit: type=1804 audit(1638664708.056:12): pid=13455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir866516550/syzkaller.5lZ7Ly/1770/file0" dev="sda1" ino=14840 res=1 errno=0 [ 1449.997168][ T26] audit: type=1804 audit(1638664708.076:13): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir866516550/syzkaller.5lZ7Ly/1770/file0" dev="sda1" ino=14840 res=1 errno=0 [ 1451.150035][T13457] warn_alloc: 1 callbacks suppressed [ 1451.150054][T13457] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1451.172223][T13457] CPU: 1 PID: 13457 Comm: syz-executor.3 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1451.182227][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1451.192301][T13457] Call Trace: [ 1451.195594][T13457] [ 1451.198537][T13457] dump_stack_lvl+0xcd/0x134 [ 1451.203154][T13457] warn_alloc.cold+0x87/0x17a [ 1451.207863][T13457] ? zone_watermark_ok_safe+0x290/0x290 [ 1451.213433][T13457] ? __kmalloc_node+0x62/0x380 [ 1451.218244][T13457] ? __vmalloc_node_range+0x574/0xab0 [ 1451.223644][T13457] __vmalloc_node_range+0x883/0xab0 [ 1451.228912][T13457] ? vfree_atomic+0xe0/0xe0 [ 1451.233448][T13457] ? __snd_dma_alloc_pages+0x50/0x90 [ 1451.238772][T13457] __vmalloc+0x69/0x80 [ 1451.242864][T13457] ? __snd_dma_alloc_pages+0x50/0x90 [ 1451.248181][T13457] ? snd_dma_vmalloc_free+0x40/0x40 [ 1451.253403][T13457] __snd_dma_alloc_pages+0x50/0x90 [ 1451.258546][T13457] snd_dma_alloc_dir_pages+0x14d/0x240 [ 1451.264032][T13457] do_alloc_pages+0xc2/0x180 [ 1451.268651][T13457] snd_pcm_lib_malloc_pages+0x3e2/0x990 [ 1451.274225][T13457] snd_pcm_hw_params+0x1408/0x1990 [ 1451.279446][T13457] ? snd_pcm_playback_open+0x130/0x130 [ 1451.285014][T13457] ? snd_pcm_hw_param_near.constprop.0+0x6ca/0x8f0 [ 1451.291539][T13457] ? snd_pcm_oss_disconnect_minor+0x370/0x370 [ 1451.297639][T13457] snd_pcm_kernel_ioctl+0x164/0x310 [ 1451.302862][T13457] snd_pcm_oss_change_params_locked+0x1936/0x3a60 [ 1451.309320][T13457] ? snd_pcm_plugin_append+0x190/0x190 [ 1451.314809][T13457] ? debug_object_active_state+0x260/0x350 [ 1451.320637][T13457] ? mutex_lock_io_nested+0x1150/0x1150 [ 1451.326216][T13457] ? lockdep_hardirqs_on+0x79/0x100 [ 1451.331431][T13457] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1451.337698][T13457] ? __fsnotify_parent+0x498/0xa60 [ 1451.342860][T13457] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 1451.348173][T13457] snd_pcm_oss_sync+0x1de/0x800 [ 1451.353048][T13457] snd_pcm_oss_release+0x276/0x300 [ 1451.358179][T13457] __fput+0x286/0x9f0 [ 1451.362178][T13457] ? snd_pcm_oss_sync+0x800/0x800 [ 1451.367225][T13457] task_work_run+0xdd/0x1a0 [ 1451.371755][T13457] exit_to_user_mode_prepare+0x27e/0x290 [ 1451.377400][T13457] syscall_exit_to_user_mode+0x19/0x60 [ 1451.382872][T13457] do_syscall_64+0x42/0xb0 [ 1451.387309][T13457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1451.393225][T13457] RIP: 0033:0x7fbfc78d0ae9 [ 1451.397663][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1451.417374][T13457] RSP: 002b:00007fbfc6846188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1451.425806][T13457] RAX: 0000000000000000 RBX: 00007fbfc79e3f60 RCX: 00007fbfc78d0ae9 [ 1451.433788][T13457] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 1451.441777][T13457] RBP: 00007fbfc792aff7 R08: 0000000000000000 R09: 0000000000000000 [ 1451.449764][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.457837][T13457] R13: 00007ffccf6d444f R14: 00007fbfc6846300 R15: 0000000000022000 [ 1451.465865][T13457] [ 1451.528034][T13457] Mem-Info: [ 1451.531392][T13457] active_anon:3304 inactive_anon:203973 isolated_anon:0 [ 1451.531392][T13457] active_file:5901 inactive_file:78140 isolated_file:0 [ 1451.531392][T13457] unevictable:768 dirty:99 writeback:0 [ 1451.531392][T13457] slab_reclaimable:23129 slab_unreclaimable:104207 [ 1451.531392][T13457] mapped:21783 shmem:8953 pagetables:3055 bounce:0 [ 1451.531392][T13457] kernel_misc_reclaimable:0 [ 1451.531392][T13457] free:1184765 free_pcp:10545 free_cma:0 [ 1451.627624][T13457] Node 0 active_anon:13208kB inactive_anon:814980kB active_file:23484kB inactive_file:312560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87132kB dirty:396kB writeback:0kB shmem:33356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 403456kB writeback_tmp:0kB kernel_stack:14372kB pagetables:12216kB all_unreclaimable? no [ 1451.725163][T13457] Node 1 active_anon:8kB inactive_anon:912kB active_file:120kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 1451.801106][T13457] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1451.885432][T13457] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 1451.892264][T13457] Node 0 DMA32 free:769956kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:13208kB inactive_anon:814980kB active_file:23484kB inactive_file:312560kB unevictable:1536kB writepending:396kB present:3129332kB managed:2716688kB mlocked:0kB bounce:0kB free_pcp:37876kB local_pcp:19604kB free_cma:0kB [ 1451.939676][T13457] lowmem_reserve[]: 0 0 0 0 0 [ 1451.963572][T13457] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.062645][T13457] lowmem_reserve[]: 0 0 0 0 0 [ 1452.080752][T13457] Node 1 Normal free:3953520kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:912kB active_file:120kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:3712kB local_pcp:0kB free_cma:0kB [ 1452.154102][T13457] lowmem_reserve[]: 0 0 0 0 0 [ 1452.159297][T13457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1452.172249][T13457] Node 0 DMA32: 199*4kB (UME) 103*8kB (UME) 23*16kB (UME) 158*32kB (UME) 79*64kB (UME) 8*128kB (M) 2*256kB (M) 5*512kB (ME) 1*1024kB (M) 7*2048kB (ME) 180*4096kB (M) = 768836kB [ 1452.258341][T13457] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1452.279191][T13457] Node 1 Normal: 144*4kB (UME) 36*8kB (UE) 25*16kB (UME) 160*32kB (UE) 72*64kB (UME) 19*128kB (UME) 13*256kB (UE) 3*512kB (UE) 1*1024kB (U) 3*2048kB (M) 959*4096kB (M) = 3953520kB [ 1452.305487][T13457] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.327924][T13457] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.345562][T13457] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1452.367216][T13457] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1452.377842][T13457] 25439 total pagecache pages [ 1452.391403][T13457] 0 pages in swap cache [ 1452.395990][T13457] Swap cache stats: add 0, delete 0, find 0/0 [ 1452.407124][T13457] Free swap = 0kB [ 1452.433536][T13457] Total swap = 0kB [ 1452.456276][T13457] 2097051 pages RAM [ 1452.480309][T13457] 0 pages HighMem/MovableOnly [ 1452.508463][T13457] 384534 pages reserved [ 1452.524849][T13457] 0 pages cma reserved 00:38:30 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187, 0xffffffffffffffff, &(0x7f0000ee6000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046) io_uring_enter(r0, 0x60c4, 0xec64, 0x0, &(0x7f0000000080)={[0xfff]}, 0x8) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x581c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x1fffffffffe, r1, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/216, 0xd8}], 0x1, 0x0, 0x0) r5 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000001300)={0x1, r5}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={0x0, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "0000001c000000000000020000000000000000000000008000"}}) close_range(r3, 0xffffffffffffffff, 0x0) 00:38:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x11, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600160000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000240)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000500)=""/164, 0xa4}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f00000002c0)=""/61, 0x3d}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000740)=""/118, 0x76}, {&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f00000008c0)=""/226, 0xe2}], 0xa, &(0x7f0000000a80)=""/102, 0x66}, 0x7}, {{&(0x7f0000000b00)=@nl=@proc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/151, 0x97}], 0x2, &(0x7f0000000c80)=""/88, 0x58}, 0x400}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/90, 0x5a}, {&(0x7f0000000dc0)=""/186, 0xba}, {&(0x7f0000000ec0)=""/85, 0x55}, {&(0x7f0000000f40)=""/165, 0xa5}, {&(0x7f0000001000)=""/98, 0x62}], 0x6}, 0xc18}, {{&(0x7f0000001140)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f00000011c0)=""/127, 0xfffffffffffffead}, {&(0x7f0000001240)=""/91, 0x5b}, {&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f00000013c0)}], 0x5, &(0x7f0000003500)=""/245, 0xf5}, 0x3}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003600)=""/117, 0x75}, {&(0x7f0000001400)=""/56, 0x38}], 0x2}, 0x8}], 0x5, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) sendto$inet(r3, &(0x7f0000000100)="424897f9e0f7be0d5877d4a590e34cff774d5fc0c7c28954f32591da44d442d6dd15e91c3a07560aad6f05be5fa3ac4474e8eea3150b9494a606befddd07c22769eb5ffcc3bb66c637d3ec7383d669259cf05266588bf5429bce4cc572e7869d3ba732e56cef3d83fe2d52a485e1c94638d4e19a6b11d7d0487b1b0a560f23579c0f4e3ee51ea6cf1a6f90140471ce0649c0f5228994fef52028c54c756b1f1f948db95b421ce71f05f3e4ff7935fa85fbe8b6be3b99c581dae1c159a618aff75ed2ba8968325ea869b103549ac5a7a8041232b57ad911232f33e9af785a999997b99c63fc9cd660", 0xe8, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) 00:38:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x80000000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 00:38:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600168000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000580)=""/96, 0x60}], 0x6}}, {{&(0x7f0000000680)=@caif, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/206, 0xce}, {&(0x7f0000000a00)=""/123, 0x7b}, {&(0x7f0000000a80)=""/209, 0xd1}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000001080)=""/252, 0xfc}, {&(0x7f0000000c80)=""/107, 0x6b}], 0x8, &(0x7f0000000d80)=""/9, 0x9}, 0x9660}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/99, 0x63}], 0x1, &(0x7f0000000f00)=""/149, 0x95}, 0x3}], 0x3, 0x2007, 0x0) shutdown(r0, 0x1) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="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", 0xfd}, {&(0x7f00000002c0)="ca79b703614f33587d405b4bfd3a02e0e1d97b3f4a3a8b6cb5417ae26ffaabdd2221fc66dac62425e481f0b1d45d1b953e431ba0002c54df8de04f2dfaf099fdc437909d1f0a5a39aaacfff5c11c454c895d63eb62214832fe1d0b88e8fc7e184c49b10ac6edc261c81ff41952a3100fc3c73656", 0x74}], 0x2, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x161}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)=""/104, 0x68}, {&(0x7f0000001b40)=""/45, 0x2d}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x3}}], 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003800)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3880d9c24aa56f15199fad0093c59d66b5ece0200c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea564a415b76966118b64f751a0f241b072e90080008002dc227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c7e5c6be0b4219a0c99e7c0cc734d9034666c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec21c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd0224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5acd3de3a83209da17a0faf60fd6ad9b97aa5fa684803660000000000000003926b81e3b59c9b081d6a00000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6f080000004da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbffae4e0f750504f6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0ab4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be03f8a6ef2cd317902f19e385be9e48dc003913653282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94e6932c1b6a17bc0cfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf462c23a74fd087cb11c97d3eb04e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000063ab6b047600d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bdea6f26e4a4304e50c349f4f9ecee27defc93871c5f97a7a54ff9b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1513a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1f59d4f21137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf05031b056237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000001400c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d493bc19f810049209b085f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762ebeb082e5e0b428ee751000000745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce8daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c1fb2d4b205aa00b6d713acebc5b014e61a543a5a194f9ac18d53b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e49acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef08fecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae5f08818fca475b169469f9efd131925d98c34b3cb26fe26796dd43b87e1cd2a39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929dfa5a210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b61180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024e94dee34666c5b5522b54cb433efa54b4e9022533e6a4598b453c9e549847c89bdee957dfa9ded9f16fdcd1b681e4c72f32fa3334313e334cc140daec7dcb22f463457a19a0b230bbded8625832a2b6dbf837704aa89a7543208debe71d934cedaf85f1bf43f23baa076b051342ab9651cc11d9b8b7e68e931ca4795a720797959d07a0fd82c770a0c0a2b1924bc8dca0c4ca73f4e8ca2de4a1689b1717d9d008131206bb60c09ffbd2b5bdb327f45a583073d0e2045ab7b9dacefd8921f9078fcc568aa1f9c419115c2042f506b50aef369859f67fe4044a6943d7c2b028146743512d95f76bdbf5d5dabd3e8b9f9729caf7f85c826842fea43486e2bead66fdded6184965168ada42a2ed63f484f677dd4dd00b3a39010aa9baddee202b1ea070e44b59d396a3a280379bec2d22cda1f4d3fd6768326578dad0e36b505c117ee65ab8f4dab871a0f19da9cf1cf2e4606c1d1761d6709e05483f2632d4fcae44ba1d31723263828419495ccd94a0e7f4d7393f0fcdc2b208665eba3ff4576b7a630c49c0c4490dd1ad354a5330a68b559ffa9ba4a2aeaefbbf2670d4b42246bd2cd088abca23528c19ca0310000000000000000000000000000000000000000000000b7548ab4acda49b43cba2f5a00297571804d1ba60dccc123f9299cd805a86ba037d83ed22f1a3fd2c1dd6f5611a2bfd4e8d6ab0ced838dbf3c116ee881988bc7f346def734d39d027e274918567d0e3459b067ec94dab1dd846353c7e2e8a8671ee124b389d3e3d8230b2e586f3cbb480000000000000000000000000000695f2305ac82faab3ab89aa100ca88a5e4bfa1f66dde9926d9fadd27b13fce909bd25a815b7fe6d52df39a9fac5ea8aa4a07f142e04b6e63d88b26061266fe98fbe1d95c8365bad6a3ac0aab956ad3ad65a77468b01792e0151816df97a5327125ff3973c8d85f00f4956b6c275776879508295fe5cc7940dd6d9ee8dd1ddb00dee231956a0de6af8a4ec351bf6470806b31b20560c453addc5331e010809971399779b878c178b3aabb05f3d0bfc90db1503cf7fadd65dd62795ec0ac3ae573caf1409f96e0d41fea10c95e4a29164ad76f87b77493a6690f6c3f6471e260ca4c3f72f24e4c0f544bfb99de319de047ee2412caa79b9ee2228da7e02ab39232dd81536f6fae80b0a1a85024137d90f3ed164e534f0ab99ad9a51be1eab361425df21a19f215c39ab29fdf7152807d53c539c269db0e3ea95dfd0bf76701e8c3fb11ab97ae1063f62ba41db200f4b4470f318d6b2f77ca22de199e271d9f5523bbebbae9364a924f6fb1d114a50800000000000000d81118ac2f4be400e9d2daaf668181394ae0975872141f6d718b5920635f8edde0e702a8528f6aa857c4d9811cf8dc53b1764c1f282b6ced9c4f6eef0655fd1ed084faddc367496709b62f1edad24299a5030af8f25719eba18d9ed113ca27ed23458a2176523a6cbdef640e67d21c6c9317a8bb394022ab4ff865df4eff000058c2647aba2482ca0e28d50556a43fa107743b82299435255655061cd2d88c48bd7e8ea9f228839bf9e483c7932a42828f9b3cef2a082f3a296eea83fb0343f8640417814630aaaa990b028ba8a070ca67317da5b99471bd70eb8c3df0a387dd94fab25e878e4f733b5e922367ce8a8dd21cbaed816c89b9c6b7953ab164f030c614cca4821f5bf21c565e0ec9f9165591b44b76e7ab1cc65ed3ab15a2a912fca6de274a8770bcce1f01e4c44a2f9b2abd19a964afc80bce4c30131200000000000000000000383d89403812856a0d3a8987447dd9848f3ad3e8b607c37f7c8d3967353c28e01ee2aca248d74434971438dd1029cc52be563c030c14ad069932415f04ea91c406c4e06ec91b4cb6591c765098e2b22f965eb634063396a54d296fd50dc391c3caec4c7aac02af060a70644d86782b08f1673c02603ef3b617e861b074017bc21dea4463f384a9a7c537ec7aef29b27fd04610f14caed0d95480cb21dd8f42f6c97c308a77648c646a5b9783910917522b813047fe4517eeeb2a5d58d57bea9a386ba35114753e288ba00343434c5ae0b804e9fa3261d6a47f8d035a7d13051ca255371e70323380000000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) 00:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x12, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 00:38:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060016c000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x2a, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) open(&(0x7f0000001080)='./file0\x00', 0x416080, 0x10) r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000001040)) 00:38:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600174000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 00:38:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc5, 0xec, 0x36, 0x10, 0x257a, 0x360d, 0x6281, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x5f, 0x48}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x10, &(0x7f0000000100)=ANY=[], 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, &(0x7f00000003c0)={0x20, 0x7, 0x9b, {0x9b, 0x1, "7c43116cf3834b260a649e98ece94347409a727d59c0e37c3f38a3987b9a4409464582de180718c3b122e1cb208febecf04dce622f33ce89bb1bf35d2887cb9849700e113e86843736894dcd35b777c8b5b2726b5cfcb213c32b80cbd4dc99f100e28c3a9b6ab4e94874f37bfa5f89e423b90b6b8f1458ea08bc4bb224769c9a97801a7d4b8114183bac5b9188e8b89f13dee57656f00e8b4b"}}, &(0x7f0000000480)={0x0, 0x3, 0xf4, @string={0xf4, 0x3, "6750b3f0203caf0ff1a689bebea0b48c46f26777f553d46e71d06e6f4c8a3a871e1a3aeb97be6158d010e60df115f9c63a6340c10779fe9960d8b1c43154748b539a2c5ed8bdd8c1d2f52de224a2316a5ef1568133d516cc283f398c64fcd6b7f4b6f7db531ac40eb0fd02a98698714184f57d7526e5fc1c8fe131c6dd664b1c406b776dc2cc9ba6249267c2ca81ec25f8ff510060fa4da760ecf1b7719fcca1d22177ba29508de820bd0b6855aa7c2be2127880022a917209dffade8e50128c05624a373e555a79aa9e5dac55ff0aec1d3ebb3d5a5ed4f02a2086f4531889d5dacd57583007f9f12e2f52b62120f1203283"}}, &(0x7f0000000580)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "6719b290"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x146}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000640)={0x40, 0xe, 0x44, "08776ca4a3892863fe95bb82fcea876484895086c70f98bbfbb4fc278d98ec0711acaaf0008787e4c443493b323bbc1513bc2158d137a1342733d477a67624c863f079ac"}, &(0x7f00000006c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0x26, "4e534d7004445afeef64d26f1bfaf2d6da41aab32a45a9534524ba4e164b068073bf19a403ac"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x20}}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000008da04441040000102030109022d0001010930060904007f020301030609216318080122b907090581aa19034fa90209050203ff03070300"], &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0x7f, 0x8, 0x8}, 0x20, &(0x7f0000000180)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0xc, 0xfffd}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "5ac2a7040345564eea82818ce2ee1cad"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x402}}, {0x32, &(0x7f0000000240)=@string={0x32, 0x3, "acde240ddb7a44733576fb8e6219d668ae64d53efbbce758190f098dc6a3c6ec1f622dcaf7a1aacab16352c459d8ebdc"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x6e, &(0x7f00000002c0)=@string={0x6e, 0x3, "3df3e16ac8bc83e4ca5c580aa33824c4da430397fee8d15e7e3ce486884f3ccc403363b2ec0479736f8f894c64cfd7b482b663c6b4e727d6bc381f9c665b290c066a87693c0ddaf1718ab6fae0e02001521d074f663c9764661ac1b8b174aa815355aa2f9273bfd4017e0dce"}}]}) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x0, 0x22, 0x1d, {0x1d, 0x11, "ead70144d0994ef564843e1c7365ecb4db4267c073a875c1ca1a26"}}, &(0x7f0000000840)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "ea4a461349a7bcb97cf400c2cea990495b645127453fd3483f16dc309e35ecc38c26e8e4866d6fba45fcd34e7c3a2f8c39cf61c23d02f4f6080aa10c2ace86027ac61b096521a5110324bd0773e412adf72f587c0f4d3d286364ad86eeac0a3f482ffa2144a179fc5ee020c437f3b5e9d2faf0dc71a25aae89d0c78a75a3990442e7f2005f50810bb397ff2ae82e3e2a9fed818b6221d5528e1454e902debad6a12903c38f864570069f827103077b487306def047b66471c9404c7a1979f47dfc"}}, &(0x7f0000000940)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x81, 0x7f, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0xd, 0x7, 0x6d, 0x4, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x3f, 0x38, 0x4, 0x6}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe1, 0x8, 0x9, 0xe4, "22794b12", "603aa805"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x1}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x3b}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x3, 0xb85762f229d0ac47}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x1845, 0x40, [0xf0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "b3db"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "b39f"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x46}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x7}}) 00:38:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x2c, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060017a000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x407f8, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0x4002, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0e85667, 0x0) 00:38:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000000, 0x9e05, 0x2000, 0x16, 0x5e, 0x7, 0x5, 0x1f}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x95b1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000000000001f4, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="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", 0x1f2}], 0x0, &(0x7f00000001c0)=ANY=[]) openat(r2, &(0x7f0000000480)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/214, 0xd6) r3 = syz_mount_image$romfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0xc1}], 0x404, &(0x7f0000000140)={[{'squashfs\x00'}, {'squashfs\x00'}, {'\x88qucshgs\xfc'}, {'$$#^$]--\xd1+/^'}, {'\x99\xd4?\x89'}, {'..&.\xbft'}], [{@pcr={'pcr', 0x3d, 0x1}}, {@smackfshat={'smackfshat', 0x3d, 'squashfs\x00'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r4 = perf_event_open(0x0, r0, 0x0, r1, 0x8) close(r4) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1d200) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) linkat(r3, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='\x00', 0x400) [ 1454.418172][T32201] usb 6-1: new high-speed USB device number 4 using dummy_hcd 00:38:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001a3000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) syz_open_dev$sndctrl(&(0x7f0000000080), 0x4, 0x408002) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1454.698267][T32201] usb 6-1: Using ep0 maxpacket: 16 00:38:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001a5000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1454.898217][T32201] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1455.178332][T32201] usb 6-1: New USB device found, idVendor=257a, idProduct=360d, bcdDevice=62.81 [ 1455.187418][T32201] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.216997][T32201] usb 6-1: Product: â Š [ 1455.221312][T32201] usb 6-1: Manufacturer: Е [ 1455.235693][T32201] usb 6-1: SerialNumber: syz [ 1455.249659][T32201] usb 6-1: config 0 descriptor?? [ 1455.291065][T32201] option 6-1:0.0: GSM modem (1-port) converter detected 00:38:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10003) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x3, 0x6, 0x1f, 0x0, 0xffffffffffff7fff, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x3, 0x4}, 0x418, 0x101, 0x0, 0x0, 0x9, 0x0, 0x2eed}, r1, 0x2, 0xffffffffffffffff, 0x1e) r4 = syz_mount_image$squashfs(0x0, &(0x7f0000000200)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) writev(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x7}, @in6={0xa, 0x0, 0x8, @remote}, @in6={0xa, 0x4e23, 0x0, @mcast2}], 0x54) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000010046) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1664, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20000001}, @in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e23, @multicast2}], 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x1c34a000) 00:38:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001c9000f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xd0009411, 0x0) 00:38:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:35 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xceaf}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1f) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0xf7, 0x1, 0x20, 0x0, 0xfffffffffffffff8, 0x52040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x8cc, 0x2}, 0x8000, 0x9, 0x8, 0x4, 0x2, 0x67fbd8f1, 0xfe0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xc, r0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r1, 0x1) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, 0x0, 0x0) splice(r2, &(0x7f0000000000)=0xffffffffffffffe1, r0, &(0x7f0000000040)=0x8, 0xe, 0xa) 00:38:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x5, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1457.008435][T32202] usb 6-1: USB disconnect, device number 4 [ 1457.015184][T32202] option 6-1:0.0: device disconnected 00:38:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600105010f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f00000002c0)=""/241, 0xf1}], 0x5, 0x7, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x100, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x4}}, {0xc}}}]}]}, 0x48}}, 0x0) 00:38:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8000) clock_settime(0x2, &(0x7f0000000080)={0x0, 0x3938700}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000200001900000060012d010f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:35 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2, 0xc0}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x10b8, 0x4}, 0x548) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:38:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001cf010f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xd000943d, 0x0) 00:38:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10003) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x6, 0x8, &(0x7f0000002b80)=[{&(0x7f0000002480)="88e11d1ee43d073e56e61c7110a27c78b264a515aab0ee4bf31bebd79d3b8983eabb79520d6d3e59f0eeaee4b539d43c20c7bc49c70869eae6a1d1", 0x3b, 0xfffffffffffffffe}, {0x0, 0x0, 0x1}, {&(0x7f00000003c0)="22c15f340afca29ec3b9359c9555952feca825169f83c5ae1b7da545e24dae7e95326a58cc5a1d98f6232dfe0b84b722fe761c941a8a32852046595e5efe07ba389150022bebce1ae1556d44882a82b890a5746f1aa663bbfbf625ba63695d65c5d5578ffdbd6e", 0x67, 0x90e1}, {0x0, 0x0, 0x800}, {0x0}, {0x0, 0x0, 0xfffffffffffffffa}, {&(0x7f00000029c0)="7799a84ab7c16e6975b99c5b22c8519c375ec2396cfd2f4903d69a8615edaffef03d5bef7151aca9cec45ec6246bf7201dd1d8f9a5e57d8f754081915d2afb01b04833655bdeb5e8c4441a284f3dd6523af79c5e5646f95692171ca4f69e4a980c2d4e83bfcdeb0b4a9b774ab45cc4ecb890b416328defe728e9677cab841692d38f0ac32c65e54c456e50dfdc0527a01e82ececa9", 0x95}, {&(0x7f0000002ac0)}], 0x0, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000002d00)="fe4dcecca15b5176907ca6b28271f2acc030f04daa8a79b59667c7673806eaca6a369aa1ef03f55b07b77d57df29ae6072eb2028fd6154ece13a955415f68347e0c85f7846d5b9fcb2c64a83c5a8c76783ff1753aecdf880e5963b5510615cf94d10e9e19ba5e9dc5f2cec01943052ed5449257815c6960f1c9775", 0x7b}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e24, 0x0, @remote, 0x30}, @in6={0xa, 0x4e23, 0x6, @mcast2}], 0x54) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x48) 00:38:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x8, 0x5, 0xc6, 0x0, 0xfffffffffffffff9, 0x20900, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x5}, 0x20, 0x8, 0x7fffffff, 0x8, 0x20, 0xfffffffd, 0xfbff, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@loopback, @multicast2}, &(0x7f00000003c0)=0xc) r3 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r3, 0x1f00000000000000, 0xd4, 0x0, 0x0) r4 = syz_mount_image$nfs4(&(0x7f0000000400), &(0x7f0000000640)='./file0\x00', 0x5, 0x1, &(0x7f00000006c0)=[{&(0x7f0000000680)="98932074d934a4", 0x7, 0x1f}], 0x80880f, &(0x7f0000000700)={[{'codel\x00'}, {'codel\x00'}, {}, {'/dev/vbi#\x00'}, {'codel\x00'}, {}, {'@#'}, {'%{#'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/vbi#\x00'}}, {@appraise_type}, {@fsname={'fsname', 0x3d, '/dev/vbi#\x00'}}]}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000007c0)={0x518, 0x16, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x4e, 0x0, 0x0, @fd=r1}, @nested={0x301, 0x87b, 0x0, 0x1, [@typed={0x8, 0x68, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x78, 0x0, 0x0, @u32=0x2545}, @generic="b1be8b1f4129d4a19bb39f19872cf12e511cb21013e96763d28a0011c943cefbea28c17b6f4312776d94b8bfd55f8fd9b2dbef050d94d5dc84579c2a82b2295d170da86f743fdce710a94ada6bdd756ab64ac6d39c99f00fc6dee71a6e1ed7a512eff220501ca73233429c3e88f9ab8cf70f92737fcc347b0547cfeda46d359146f35d1b1f60bbf28b147847bdae97add09133f450d9f490b34485969115d6a91cc7a21f53b3988dc6772a096aba96f37c8a30bf5509a61b2ba52c2ed50ef9f0df168bef7f7f2b", @generic="9c5c73848771bcf620cd483de9e286c77f636a503f0201116d8d1cae44ab8c0bfe50a6ff9ee90bcd21a6336831db7dadc67bd9d8612742ac6f30f3758d438c6c7d5d16f9ceb3097631eaa26088ca53eaf4a5ceb1aeaec7f25571e2dbe9e228be79d11e6b509366e6f2cdb10ab9356636a42e7d9803f4f6def9790e8a222e536f74aac59aa89948f8f6cc24165fffea7be93327dfa03f3a8e3a719cd8891403dc696c131702c9afedfc4e4bb22ad4adde8c40861836bf84df1ac7b014e635965a70d830fb0b4271fd03f55927b9fd20537ca3341a82", @generic="2a2e442a8b9cc7d933efef1bf7be0f15e5a9f035788c6fda781b8f2976b840f3812decc652ef04102f5c2804e262385a4f2c3aeefa981857cf0832f33c19b0745c3fccfcecad10ecdd343544cc7c39d19879cbc3d1966c8f0932e6464553059cd9a9133c867fab94bd94346c8471aa2d5ad7c48b406071b70ef9549167aa76bd27f9e56e8a72d0ad82ba785e559b3247ad7c4e42446c114c6c9c2d1045abfc0f47eee31838aba97b3a21953b01dd138c32d503e3fbeca22dd3f5", @generic="5a58d31837f5f8b7fab289957060180df25bed9f4d5a043c5c9f03ed32afe213ecf171696b915d2a9768669e61a015f1e99b74e5275c85f16a8c3385f38b5a582350196d7835360ecaa66b2ee880a984384cec8dc6c7343a527baff4a20dc7c009", @generic="36c59867accf0b1801143ab56dc8d36701f920415836d4fed4c95d95295596766e8df5e185ad909e8db7c9a10dabe468ac18c18da0f2"]}, @generic="e844dcf0eb2d6351980d969973ed7d3ac1de355c2eb3b957b125d7c393a22d5c6387361cd956ef60b8350e14827ddb0324a0968b7037ce51103a5011ec0bb76057ad9fd5ca2a93eed0780f9d139bccfa50781db67a5614f3b6596ff613faf663448983bd254a91268758208ae9ee7f626bd189bdba977dc30be5a72f63210ec6d5e5b15e822944e6641a18d50c9eff7579d2e43f1a754b9390cd0d941cfaa30ae8c894edf3b27eb445d901dd4a8e34f3a11b47e6918e9435f9468f9f55c821e9bfc7865d2a9f51493e2fe41b08ba109070f7ab5081e8ef6c158b5b4c9e1a4bfa3a4de29a1816df56d8b3a7ac2f", @nested={0x103, 0x81, 0x0, 0x1, [@generic="01d82a34d2a739cbc8c8d512acd7a35d557a2684728a40cafdfe2985e120a6f0c07286b1289d64367ab55f6248f505a85cc25534eb98859094bed66357c85088780f05164675baf5b499fdd6586d247c61fd17844630d7349a284619a08efc295a6081428359e120ffed52c7c9b7dc949f4b17032b7f7e670d71e35b82b18bf1983f671ade7b5629d829f883a22922ef93b86761a8c277aaf81d922dadc56eb0f7b187b4031ce3ab72891ad22233aef73c0c082e2957fc811e75fb6af1d7ae6a5773adf68df9f08e4b74347fdb8a468fe883db00ff6ed61445ac67d4b82edbade8421d17cbeacdfd82e26017e2df1286d57c2a", @typed={0x8, 0x28, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x28}]}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r2}]}, 0x518}, {&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000003f00000426bd7000fcdbdf2504007d80c8a09801aaee19fac46ef78086ce521ec0787619324604f0f9f4300193a2fe3549817a830f8eb9770eaba658dce2ef448ebdb271114427a653e998ba7f7bca6fb469ba717a332ae4ca546d5f22ce08003600", @ANYRES32=r3, @ANYBLOB="02b3"], 0x6c}, {&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb4}, {&(0x7f0000000440)={0x10, 0x2f, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x4}, 0x400c800) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf4443d6902f27328e04", @ANYRES32=0x0, @ANYBLOB="050029000c00000005001301000000000500e40001000000050019000200000006001201050000000a00bd00d606030006000000"], 0x50}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44fe353b57d64451f8b7fe65c80000002400e4ffffff00000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000a000100636f64656c0000001400020008000200000000000800010000000000"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9c06e110ea3c4abf5337e0747fde5000000002800128035d8a17c1ea48e896e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) pidfd_getfd(r6, r8, 0x0) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 00:38:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001a1020f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x9, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300)=0x40000000, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) signalfd(r1, &(0x7f0000000100)={[0x6]}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0xfffffffffffffd9d) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x42}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000000)="67b18b8acf5d16a5d21d143731122ddd", 0x10, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xd000943e, 0x0) [ 1459.336838][T13702] nfs4: Unknown parameter 'codel' 00:38:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001dd020f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) getpid() sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xa, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 00:38:39 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x40005, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0xf0, 0x1c0, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x4a3c}}}, {{@ipv6={@mcast2, @empty, [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff00, 0x0, 0xff000000], 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x10fc8358}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xff], 'vxcan1\x00', 'vcan0\x00', {}, {}, 0x0, 0x2, 0x1, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x8000], 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x8, 0x40, 0x9, 0x9, 0x0, 0x0, 0x80, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x1, @perf_config_ext={0x0, 0xb8}, 0x1001, 0xde, 0xa30, 0x9, 0x650, 0x7, 0x3, 0x0, 0x7ff, 0x0, 0x6}, 0x0, 0x1, r1, 0x0) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xd9, 0x9, 0x4, 0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1decc6cd, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x10100, 0x0, 0x3, 0x8, 0x8, 0x7, 0x3f, 0x0, 0x6, 0x0, 0xffffffffffffffbc}, 0x0, 0xa, r2, 0x2) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x4, @private1, 0x80000001}, 0x1c) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50}, 0x50) write(r2, &(0x7f0000000300)="f6b4321d26c730c797ce02dd1a3070eddc06a7470e933ea3273e7c2da3ab7c43e5bdb4a5421fc55b8d077bf31711dbe91a93f119", 0x34) fallocate(r2, 0x20, 0x0, 0xfffffeff000) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fallocate(r2, 0x0, 0x1803, 0x10000101) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/557], 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x90) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x8240, 0x0) 00:38:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x800, 0xffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x111) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000140)=0xfffffffd, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600179030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:39 executing program 5: r0 = socket(0x10, 0x8000000803, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000040)=""/254, &(0x7f0000000180)=0xfe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800b00010065727370616e00004800028005000a0001000000060018000100000004001200060010004e23000005001300010000000500080009000000060011004e240000050009000600000006000e0000000000"], 0x78}}, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)={'syz0', "cb85f06bf0cc61ac05b3ea6a52fab02aa83c4e54822af87e745ff4ca1d16a0442789f2693471308ff17cd001a6ae52deef2179fc1c25d653285a779923f701bf7477895201d4d978bb325995052eac0ba595a2c5ac8023ce85fc45f4b35b22b13c7fde43ae15ff7dd23ffeefcc8d781b0f65a43242e7e56098f09150e7500d97f3e082cb83d2e95c71901fd1bed9f269654f"}, 0x96) 00:38:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xb, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) [ 1461.178424][T13762] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600190030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1461.270257][T13771] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.5'. 00:38:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xc, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:39 executing program 5: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0x307e, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x2140}, 0x0) r8 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r8, 0x1f00000000000000, 0xd4, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd_index=0xfffffffe, 0x11a6, &(0x7f00000001c0)="6084c4fb319d8a0cf0a0a4b506ce1d55b8347b5a157099a824e7e544a9e5998661eb2afb5b93fab06e0239600bf9da3ec82d72e31fa79b72b7ddf444", 0x3c, 0x8, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000042004f", 0x7) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 00:38:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 1461.553962][ T26] audit: type=1800 audit(1638664719.637:14): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=14036 res=0 errno=0 00:38:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001c0030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:39 executing program 3: syz_usb_connect(0x4, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x5c, 0xbc, 0xa9, 0x40, 0xaf0, 0x7901, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x92, 0x1, 0xde}}]}}]}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x0, 0x30, 0x6c, {0x6c, 0x21, "645b56529fb2c2bb469e23319d71f95e3ecaff766446f2cfed73306c4f86b02850111a3d3751c5c2b2887530f524d88215927f1a608ba934b6e41f5deabe844b7a514c4896fe0688d9afe82689dcf2a32353de17ad953e413be7526a363cc20182d186ac238d26c60849"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, &(0x7f00000000c0)={0x0, 0xf, 0x86, {0x5, 0xf, 0x86, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0xf07, 0xfda5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x6, 0x58}, @generic={0x56, 0x10, 0x2, "211d20a105767e5e1655e7137800c36d10e7e47ced8a5c55d8c1583cbf69249da2af04602ea0fc9a16b5d9f645c96af6d062bf033d1178923e153a1ab24e729037212f10df996d1055a2ba904aaf2a3e6a9266"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8b, 0x1f, 0x5, 0x2, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0xa, 0x1f}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc0, 0x4, 0x0, 0x4, "fb0f6209", "4e863fbc"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x0, 0x5, 0xfb, 0x1, 0x20, 0x430a}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0xe, 0x72, "a28a1782d6794bc3ca44fad947459f7bddeb1995782f84ff8795ed029a70ff652c5cf779dbd2006cfd701f3a5a54456b2f535f0fc87c0b7ce2723484b4d099a7b95e98a0a1bbafecf1d574b9668c387dcde9d45efc351f2521ccd5987bd03cf4c9580d6322fa999fe47e3789f6292782116c"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000480)={0x40, 0xb, 0x2, "8904"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x8001}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000540)={0x40, 0x17, 0x6}, &(0x7f0000000580)={0x40, 0x19, 0x2, "569b"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x3}}) 00:38:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000080)=0x7fffffff, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xd, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001c4030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 00:38:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) sendto$inet(r0, &(0x7f0000000100)="fb1afcbec751b46c98ead689605bea9f76633d0ebbd7e23ef90d7e889a0423972775c7c1950422217ead66d30d715b000c96962b1a6371b258a3158962788ad8b4f1830efe74c93c845cbe0130f920fbc1d3f4886b6ab5eb91072437c045df567c85dcbc77215c60cb56d0c201bf385df0f0c5be4b2c9074c6da2061170a9d1f7ae0a5780160bf58653850ddb2d817311fba9bbf861eec95b526add4e8c41e6b33970363be9f88be1fb89cc5ab863e3610", 0xb1, 0x10, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) [ 1462.088152][ T1157] usb 4-1: new high-speed USB device number 8 using dummy_hcd 00:38:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xe, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001ec030f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1462.328685][ T1157] usb 4-1: Using ep0 maxpacket: 16 [ 1462.450505][ T1157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 00:38:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100050f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0xf, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB="1b3de7854ead2de6ca7559c76207edaedbb33f995db50c196aedb406bacc054f05f29e8f7633be44e0531a63994f9c5564ca0c4c1a8b666e21e902d69731fb6ce7b6c46e1dbf9eb3ef1eda45465ea0519decdaf19141a6db74c45cbace78c165c602b0b0d69d0f8cdc433d524419489ce0adb9a97ae9db8d3a9123e6ebbfc8f4f1fc062dba3c777bc35c159ce92b57f402b6f0b336adccba0382295d1ca3e8a17bd601e11e4b3de1d7b8f3f29476aed6cbbd8cd708c25cf0245ac79a65480444ef5aae57464dbae03dab522ab3f3fd98b7ba"], 0x44}}, 0x0) [ 1462.508352][ T1157] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.531724][ T1157] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.697653][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1462.768157][ T1157] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.40 [ 1462.782085][ T1157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.791562][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1462.835413][ T1157] usb 4-1: Product: syz [ 1462.860020][ T1157] usb 4-1: Manufacturer: syz [ 1462.876449][ T1157] usb 4-1: SerialNumber: syz [ 1462.889728][T13849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1463.157995][ T1157] usbhid 4-1:1.0: can't add hid device: -22 [ 1463.172351][ T1157] usbhid: probe of 4-1:1.0 failed with error -22 00:38:42 executing program 3: r0 = socket(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b36ef573b0bd29bd57c95535c3826d92c3c03e6fd89f610a762ef0c62932f29e16cb772d96860ecd56d17dc2e20f71a1dff0ea507e70e602efc271d7288c1c09917b7bd8f7b59b71416a48b624b9090e119fa8eb4870daa6140c6dc15dc72a52129dcee095d0e02277895977e64c25850edf3ae68f3a283127", 0x79, 0x4040000, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x298e}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/comedi', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) 00:38:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6) 00:38:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000000080)=""/8, 0x8}, 0x10160) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600101050f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x10, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:42 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ftruncate(0xffffffffffffffff, 0x80006) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x111) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x1fdb, 0x4) sendto$inet6(r1, &(0x7f0000000580)="b312a1cac8c8f153976dd40752353ffea86d5eef14699c77b7a80cd105aa567607a3cbd279dcc28bd5346f9e3e2dfa5243ea976a1343260d5cfe381ef29c342792", 0x41, 0x20000044, 0x0, 0x0) ftruncate(r2, 0x80006) sendfile(r1, r2, 0x0, 0x8000fffffffe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/157, 0x9d}], 0x1, 0x5f97, 0x0) [ 1464.774632][T32202] usb 4-1: USB disconnect, device number 8 00:38:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100060f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000080)={@local, @multicast1}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x11, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100070f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 00:38:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x324}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)="207be6b74915f7953f218b797643d25bf15160", 0x13) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x5, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:43 executing program 3: r0 = socket(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b36ef573b0bd29bd57c95535c3826d92c3c03e6fd89f610a762ef0c62932f29e16cb772d96860ecd56d17dc2e20f71a1dff0ea507e70e602efc271d7288c1c09917b7bd8f7b59b71416a48b624b9090e119fa8eb4870daa6140c6dc15dc72a52129dcee095d0e02277895977e64c25850edf3ae68f3a283127", 0x79, 0x4040000, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x298e}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/comedi', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) 00:38:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x12, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100090f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000a0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1466.455728][ T26] audit: type=1800 audit(1638664724.537:15): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14036 res=0 errno=0 [ 1466.877589][ T26] audit: type=1800 audit(1638664724.957:16): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14036 res=0 errno=0 00:38:45 executing program 5: r0 = socket(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b36ef573b0bd29bd57c95535c3826d92c3c03e6fd89f610a762ef0c62932f29e16cb772d96860ecd56d17dc2e20f71a1dff0ea507e70e602efc271d7288c1c09917b7bd8f7b59b71416a48b624b9090e119fa8eb4870daa6140c6dc15dc72a52129dcee095d0e02277895977e64c25850edf3ae68f3a283127", 0x79, 0x4040000, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x298e}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/comedi', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) 00:38:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x13, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8) 00:38:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000b0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:45 executing program 3: r0 = socket(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b36ef573b0bd29bd57c95535c3826d92c3c03e6fd89f610a762ef0c62932f29e16cb772d96860ecd56d17dc2e20f71a1dff0ea507e70e602efc271d7288c1c09917b7bd8f7b59b71416a48b624b9090e119fa8eb4870daa6140c6dc15dc72a52129dcee095d0e02277895977e64c25850edf3ae68f3a283127", 0x79, 0x4040000, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x298e}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/comedi', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) 00:38:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000c0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x14, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) accept(r1, 0x0, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2000, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000d0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:46 executing program 3: r0 = socket(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1a000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="b36ef573b0bd29bd57c95535c3826d92c3c03e6fd89f610a762ef0c62932f29e16cb772d96860ecd56d17dc2e20f71a1dff0ea507e70e602efc271d7288c1c09917b7bd8f7b59b71416a48b624b9090e119fa8eb4870daa6140c6dc15dc72a52129dcee095d0e02277895977e64c25850edf3ae68f3a283127", 0x79, 0x4040000, 0x0, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x0, 0x0) dup(r2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x298e}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/module/comedi', 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x2000, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0xffffffff}, 0x100, './file0\x00'}) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)}}], 0x2, 0x0) 00:38:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x6, 0x5, 0xff, 0xf4, 0x0, 0x7, 0x800, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080)}, 0xc090, 0x4000000000000000, 0x401, 0x6, 0x0, 0x6, 0x6, 0x0, 0x1ef25f48, 0x0, 0x7ff}, 0x0, 0xb, 0xffffffffffffffff, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:46 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000e00)={0x0, 0x3, 0x0, [0x9, 0x312c, 0x7, 0x3, 0x3], [0x7, 0x100, 0x2, 0x2, 0x58, 0x4, 0xfff, 0xc10, 0x7, 0x4, 0x3, 0x9, 0xa200000000000, 0x0, 0x7, 0x401, 0x5a, 0x285, 0x5, 0x0, 0x0, 0x7, 0x9, 0x3, 0x1f, 0xfffffffffffffffa, 0x1, 0x4, 0x5, 0x9, 0x0, 0x1, 0x8001, 0x0, 0x3, 0x1, 0x8, 0xffff800000000000, 0x8, 0x0, 0x8, 0x100000000, 0x3ff, 0x8, 0x5, 0x9b, 0xffffffffba1f45f6, 0xa708, 0x6cd, 0x7, 0xffff, 0x80000001, 0x0, 0x4, 0x100, 0x8, 0x5, 0x7fff, 0x1000, 0xdc6, 0x3, 0x7, 0x10000, 0x10001, 0x18, 0x10000, 0x6, 0x3, 0x7ff, 0x5, 0x6, 0x7fffffff, 0xffff, 0xe29d, 0x1000, 0x0, 0x7, 0x10000, 0x9, 0xbdc, 0x1, 0x10000, 0x2, 0xd2, 0xcf, 0x0, 0x5, 0x9, 0x6b2f, 0x72, 0x9, 0x7f, 0x1, 0x0, 0x1, 0x7, 0x5, 0x3ff, 0x1, 0x4, 0x1000, 0x1ff, 0x5, 0xd72, 0x9, 0x4, 0x9, 0x3, 0x9, 0x6, 0x7, 0x401, 0x81, 0x10000, 0x7f, 0x4, 0xdc0f, 0x7fffffff, 0x12, 0x1, 0x81]}) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x5437, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2}, @rc={0x1f, @none, 0x21}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, r4, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x2, 0x5, 0x80, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000540)={{}, r4, 0x12, @unused=[0xff, 0x4, 0x7028, 0x7], @name="a7ea48782bbb515168afa2b1632e47e6a523a2046a416bbc38ae95bb4dd3bbe758ab45d8522e6a2a9c7ba4ae523fd43c290f6cd35fbea24c9759e89ab6fe42228594c95422d0bf8accad90a875e6c10961684f8cedc01233c1f022a2e68dfe71742f84bd7fc8ffab8f5f4f10395e11bbcaeb78965b0935fa4d5c4edaa893bb4543b13bcd351c1258b21ad29ffec80531b7525a6e21f0976b2d8e24cb45d7efab9e52fff018e61252df08f4725377b057afbd9302d4cb06825103e85797bc34ffc18a22376ebb9318491e05ff0fcfd1f2461fac3bf05cd3e40ed492baac439083e9419724d72bb2d225ed78f0b5a191cee5c5225619e62fee4a4efd6448acc8dcc852d44fc2bfbf1ce5bfea895e4eb3a269409d5789962cc7f8baeb58fad81afe4fabf7b673fce0c5e2e381b3277ad234c7f44ce358e160269465353c9db1396177776f8b2d116de62a6443608b08e60ec3906051d4cfa820ad2b5a90b3b8284fae5a8b23a7de3ac70bf78458e7c6d9b37e75973360131e8253b4e2207fa39fdd3aee58fa40eb764da8edf6c421004ba6ab9b7bb4f96e69b25cef6685e7e337a19c88dd6fd9a8fd3d61cbc6c5323f4f1f25720a17e96487972b60a4180167d57c315f42ba9fe70f1373b022c5ffcff248a04e257610013ef674bc87d7f8346c7fc9ff63647171f83d425a65aa1e034692008bb20b6b413f4f56e83bebd4d7389ecf0431c82834bbe6c289f88d7c24083842d92d165098c22c5f784e3514ac618305cd1fd274451122751b351d5177bff10345e6144ec62611ba719fa6e4d2d882ce663a8ba78c216b79cd599ae219de2fe72e90c15e583d0c5c1b6798586c708ef90b088b0d262111cf4fdcbdbefa9fcd73515ef564139b7276a0b2d12ca2ad325ec44ee962ca3ebafef762356054e0c8eda6c1b7b9e3380da79187acc36323d03b75ef9d85b9f83660ec97db6ba8ed9809eb14ca30ecdcbe2d846dad5331b0c34fa9308ae0e90f17f67a70de7712229f68a9f69dc3d5e15d70c28aca59ba1435f9dc1b5b93225af011475b85a0fe6623d1236e855509dc25cc6626ab810eafe5e5007bcbf17e941f574b5b8e62852ee75c630606932eb70ceaabe19049b024cac264109bd1e3b10c4a65785e04e59fa8a3b2080f2f482a1ff607d6e261e1faa8339a69be3f01984bff3261544875a1be47f0bd5472d77b6bba7731a246abf5a781bb7e53811e7523cb46a4c5e70c0fd9ce9763912139ed19cbbba7d796d9f8ee796b08d2f244d87d56f753da4cfed67426aaa7a6cac2f1d220333300e699b558405c32eec926c96272eaf113b5a972e7609bc7c46d2ed9a661ba7c4a9494f89cf3950ebca96ab4e7b5b2dd55732de42f39e6dd909dfe6b63ccd99bef8217f05d8ec0a437893a228a4b6687accba461c0d0759014c9fcd5b6e077cd4269d89f02abae93482d52463ef0922c58ead12dd457f018652f7915bf7ffb645df537015f479f1ea6eda2422abd0c71e05f3bf9c418e8db219d10da25c8d23c7093716569a80617798128866c795cb2f4e5a774fb34e6a5d5007f50ef343a1d362b801470c279b8e5882ebd3ef5b204aec64fe33880aed1ceec444ad59c1a7cb972489015a7ee6ad8d6335b623401d8f84e55cbfc33607f5798185692eef59e38ad2580a5db61364f33eb2e6aa079cd161ac5c99c87d01e91470633267dda824a8026376cf36927d4ea8e3fa9f53e783b4533626cee518a73cf44dd2a87688309f7215f42f387cf3f5adbb96a5a2f0efb4463dfdd034f785d1ac247c91bd3134a0fee759c35bf1216cdc23335a3785338eb5771a8eebf79c435091174c25e407f899b957c7e887af84f3f900b3aefdadc6f18d76a093d3de17bcf00b2ed47d7ca9b7471f2a034436e43f801eb6d2457dd6ef994368d168b6c825d4d52d39f073402958c59fbb0b19653949ea73b90c880bb5a6870d4c97f4b143f3ba7e9d6424e5fea1aa69d914aa3b29d50953a1478819f11f033c7affe9a200152526a0ae33ada48fefe969d1ebe58316455c55049e6ad4ee3c89598b5a926ae57e8e1d21b14c10f6c4a580524a0b0bd29ff6c22a06a579000060356fa490dd7a70b649d150f143e22dbd7f6247db7a7c13322db42d008ce9686ed9b2e9a024baed99d8e2ff595fabb203a363e4184e424bab30ce7c8f382d5d638fc847f45a76894f020c3e7cde4f4643dfd7c222fe9f1c6269fb3b4ac6dcbcf625b1818f7baa25de5d6df5df36075652aae74c71c9d594c1974f3a26ffc35416831480d6b18afe1633a66c1b50dfb40e5205fb9bec99b3ee5fff8f2053069e44a1416e11068541da39fedbeb7bdbaaf10f26f6cee566af8b45bb7a28a58af338e78b3e8b48dc3196776840cf2047a9839de2980c2a66eccae1dffc9e24e4333e43b731e3da921998fe3877567c1bfa6414e7e3ed7e4ed4d9be680e264a448edf92ad410e4fa92c519e8db12b2e7a6a7f56d2ed17c693adc0c3d966364df3a553b564dbd950e3ab028c013eff5897471e724ea628630b64f536ba549ba5e9642f059c78647b80aa294365768ef2beec83f60d16e0e84505ed3685b081b2f50e2b6c8704b660c14782faaa9abd50cb0be56329a73f4b025fd8cf3d223c0d33d79b5a20b8f89636674202cbf0391e5996b017a4816cf9e4d535ab673521827b6eaff5ee594c3cf3d5e9d257f818e9bace76dc40c6520a0748e0c7e7b5dd78f28c3ed4dd4ea3bef0957408b265217fb4b5067d2e7f6e0b579303dbf54f305863a07afc54bacde10f9416bb651025e6fa83fe396d2c6b2dc505c2a586343d0cf32936fc09a927e128cd723de34e0cc7e4ae57f44cd86ad3590ccd992697b23a31a6d57f3074fd3cfbba5e7f07770ac63ded0f35a15a6effa63ff0172a7c13ed951090a9dcd1111de1998216f7f665927a9ef4815f9774371b776c534a0aef9ef31f11f3aa9de46b590b4fbe97770473d0b27d9da4628f328403654727ab27a6b929d5a85cd9cbfa38ac28cbbe8671d7bf378b0f4e39073ae1e1a8008f5b28566bbd16785fa8dbd38333e731d9e40360d8bf4e77b81147db49663fd51d92bef596a0f4285dd0420c3fe5965ecdb6fbd4df552716215f088943c22cc332e964e4c3db382b0df530e9097dc6ba480090001c620280f7f0a75794ede4064a85732c854f253f977e22f07f9f4fc17171b018a7f4286de2d89e8e80a4032db81bf387cb1d95e322d8214704ef8435e9e5c7f9e3c544c8073caf6419b6ac2e6b959bfef96c30c6678534f1094f2e388e80e82fd7f935888dba4f5fe2bb57ea151e30ba115a3191c25dd72d637d15fa14653959f96265f4e0c264881929cf2914cdc4f8193477e2798db362dd969f76862703beedd79c145e754cd75f2dd2d3105a3c6b4bee4d1777a2b487d51b350d870e4de732ffb3138f409120d9607a6cf26ba6f87ef42bd58c7e721912dc60da6fdae37a018c142ddf9d1b545c08a4d370f9b42fbc6aaf57df19e54ee095c4e8b37bf7be7b73e2ecac6aff25ce3f193def69930b7ebc67e0da342d9b2d8ec03bfe536f2dfafc1b7605e9883a49606727875eeaa294e6d905bc86978f2404acc592d98ba83cc19ab45290e378da18cb79751a3e2baa5ec1a972c52daef82062013e918c9682e7a59df2d2b2fa06dbe4b46ccb9deb591ee53f21b59b781d54f93b3821e62568794e7e7a3d31303a31163c91c6af6af0ced1a679ddff50426798c6902f9402d5287a193cd87d6992ddadc9e29a0498df8e8178f56f833e60e134dad975eca6fa307f9caefbe9dfff416e7f08669d310654f36db173bbea2c292f01e3f6df77aafc81d0380ba1061c881388859771aca3d72460f7ab8743f084c45369f2d173573769ed90e644c73098a64433ebd2636b91fc3295883e8259b570f321e2da6bcabd342ff2121f77016d53edcebd58f5deff24695647e5b81fefbf24ee7323b9f7cbfcfa54c50feb4140d7efaef7ce5f7374ec98b99379ecf690d3038a152a5a9dacefb99a2a1cb29cec36bc86b1be01d5b8274d1c25c33299569d56261cd435ef817cc817c0342c2c2082a1472ba9a142fe5c71569b74362fbe66f02259b093303596e8e319420906ee96046c3c2e8d7f05fed1ae71d976a8c1063c5adab9dc8205071f2344cf75e9b8cb59e91a3ffdf12bd231ea86295d4d054b72e431b096a36c49d420160bc513eb4243dfb8fef8bc22df0b5dfb7e8e9cbbfe99af89466f844ffb72e64472e661d357e4ad966e2d61a45ee190557e29d265962d4271c315532eb58b8326a917e2c412635ec8eb496fe682b09e742b32436237c3b8b2375a71e31d0406619c41c0c4b3302e9292e024a713dc044a13f07106398b6b96a649d366519903a8b9481c0fdeb27d2d209907059db9edc7b54a415d18350ff5dfb8fde13e2d3694600c92f08e14a510cf792cb887395ebf4f5830d8e6158ad2d3e672dda2bf023a044e5eeb37ec1a60855ae201df19ae00b84a3978efc495e8c2a17524a3e1a4616be0528d8572f7e8c602eb774438c4cebcdcdae2f3f37bdf3f98674faa4c6f1bc6538e5341dd4993aca1658512b3b22f664e3cacb1e26363cbd421263c1bd3cb55115c3a75e123a42225ee05b8f0e27972e3c7a6ae316a9a4d686dd1310ded7a257d7b40e4ae83efb2c96a568c670f3f00c54111c6066a2e409645f1b6cacc4f7a47ba56eabd5b3a5edb31a64414af8db59cc695282d330015fa279e94b4b259114499175a6d773dfa11dbdfa8e711323b12fd8cf2f0a55788fb563b358fcc0d3ec6a7954ae6f268fbaea8225a84752c5c8ffc52256c87d8dac73519a2ebfe6e9a90a908c8951d4932575b5f766c428c170aef21feb20134bb2307c1bb7933cac355266025768653ea9859ac61b00777940536efe3bb9fdc2ea594684f6bf908fae8fd5d944b2f15707286c3b100d7d351e611f5437426fa26ece6fc6e05dcf4286d2cc2a12e1e91f13ada1007ea9dbd420dd26276c0bbed80a42af524ec35a1ef6cac92f0974b9a984e9430032b9406d76282b6b3c8e034866635b42abc7d0b0424b08355a5cf5926fcb924fd04b63ace06f3a8f09a46a199e31b3d293a59227427602e79d5c3912d779e7670250a3082f3aa2f34acef4a535d40815b2c0dba5a2dd71ff051b990a0f8d1e8ebd403f73f7238ef68f39929b37d91c53650f6116e1d44af82540f2ab90f6e58f5b736026f1ba6d294243bb38305bdace87a150bc4330abde46bef21ddb228958ba930f91514a23ea5357c560ce87987c99854778436f5b50498cc5f554b6e1ba1ae1b48612bb1e3731f1e030bf3503972c33aec21b0d149d16de4bc5518eeb6161c16853e61d61c974716e133665f7e01ac5c099d948b57e57eb971f06c2b7f3df9aaf28eba5f90966c668b330f9e3e7c72475a6a55c5c4940d6c9ce5ebeb5877ecdbe34930c17275c9098b3d4822f540c0d01b4c2a41799a243e68c777f8c42e0ba3cc163bce1e5fd46010f98b48df746daf2fadfe349eddb89ca213bda3ccf85a6b1e7f9b3fad265a700a26e6ea98a3a8137e3ee9d923acc42df7f4f513e5d9d5eeabae24a26cdcc5541514d09e030db8004756f832f1400b6235d56ed55693f9bc401ec1b00dbe89b3681d23fd6e2557a66fbfbcb9ed25979e6804b51ad40c4ec4a0f770892b119c71a7268a651107900ca5d90a348a7"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000780)={{}, r4, 0x8, @unused=[0x10000000000000, 0x20, 0x100000001, 0x20000000000000], @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000740)={r5, 0xfffffffffffff28e, 0xffffffffffff9222}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={r5, 0x8, 0xff}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001780)={r6, 0x1, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={r7, 0x3, 0xfffffffffffffe00}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000020303000000000000000000a65400000800010001000000090002000000000002000000a02fcce903055640fd88236792dcec60028db36dc168fa00b97ab0cfa8064e7ac0bbb055957b47ed3811fb337950ebbda1be8cc09252aa8f0eae2230c9bab4876c6a89a8816f36f233e9db13c7e71e3699a2ea2c3ec87e5bfaa6b0d841208b07af3ca1f515531209622d1fd2beb10135bca149bddb0955222e60f9734728bbb951208c820db08f72d14e66b475acfe85f1f2ddb905d5e8552a09ec22f978b7"], 0x28}}, 0x0) 00:38:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x15, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9) 00:38:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001000f0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x8, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000080)=0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x16, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001d10f0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x7f, 0x8, 0x0, 0x7, 0x0, 0x86, 0x4184, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xa, 0x75a}, 0x4002, 0x2, 0x1, 0x7, 0x33, 0x8001, 0x7, 0x0, 0xfffffff9, 0x0, 0xffffffff}, r1, 0x10, 0xffffffffffffffff, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600120100f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:47 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x81, 0x0, &(0x7f00000003c0), 0x2000000, &(0x7f0000000640)={[{@size={'size', 0x3d, [0x34, 0x38, 0x67, 0x32, 0x36, 0x6d, 0x6b]}}, {@uid={'uid', 0x3d, 0xee01}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x37, 0x39, 0x37, 0x38, 0x31, 0x39]}}, {@size={'size', 0x3d, [0xc]}}], [{@hash}]}) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x60c000, 0x24) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000100000003000089000000000000", @ANYRES32=0x0, @ANYBLOB="0061000000000000140035007767310000000000002c00009c4b70696b48f955636af401d6d5ab9c25055450accf25ad989c567b8822148562c7e945f0"], 0x34}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) 00:38:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x17, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa) 00:38:47 executing program 5: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000e00)={0x0, 0x3, 0x0, [0x9, 0x312c, 0x7, 0x3, 0x3], [0x7, 0x100, 0x2, 0x2, 0x58, 0x4, 0xfff, 0xc10, 0x7, 0x4, 0x3, 0x9, 0xa200000000000, 0x0, 0x7, 0x401, 0x5a, 0x285, 0x5, 0x0, 0x0, 0x7, 0x9, 0x3, 0x1f, 0xfffffffffffffffa, 0x1, 0x4, 0x5, 0x9, 0x0, 0x1, 0x8001, 0x0, 0x3, 0x1, 0x8, 0xffff800000000000, 0x8, 0x0, 0x8, 0x100000000, 0x3ff, 0x8, 0x5, 0x9b, 0xffffffffba1f45f6, 0xa708, 0x6cd, 0x7, 0xffff, 0x80000001, 0x0, 0x4, 0x100, 0x8, 0x5, 0x7fff, 0x1000, 0xdc6, 0x3, 0x7, 0x10000, 0x10001, 0x18, 0x10000, 0x6, 0x3, 0x7ff, 0x5, 0x6, 0x7fffffff, 0xffff, 0xe29d, 0x1000, 0x0, 0x7, 0x10000, 0x9, 0xbdc, 0x1, 0x10000, 0x2, 0xd2, 0xcf, 0x0, 0x5, 0x9, 0x6b2f, 0x72, 0x9, 0x7f, 0x1, 0x0, 0x1, 0x7, 0x5, 0x3ff, 0x1, 0x4, 0x1000, 0x1ff, 0x5, 0xd72, 0x9, 0x4, 0x9, 0x3, 0x9, 0x6, 0x7, 0x401, 0x81, 0x10000, 0x7f, 0x4, 0xdc0f, 0x7fffffff, 0x12, 0x1, 0x81]}) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x5437, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, @l2tp={0x2, 0x0, @multicast2}, @rc={0x1f, @none, 0x21}, @nl=@unspec, 0xf0f4, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, r4, 0x4, @unused=[0x101, 0x2, 0xfffffffffffffffe, 0x8], @devid}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200, 0x1f}, {0x1, 0x7}, 0x2, [0x6, 0x995, 0x80000001, 0x6, 0xfffffffffffffffc, 0x2, 0x5, 0x80, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000540)={{}, r4, 0x12, @unused=[0xff, 0x4, 0x7028, 0x7], @name="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000780)={{}, r4, 0x8, @unused=[0x10000000000000, 0x20, 0x100000001, 0x20000000000000], @devid=r5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000740)={r5, 0xfffffffffffff28e, 0xffffffffffff9222}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={r5, 0x8, 0xff}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001780)={r6, 0x1, 0xfffffffffffffffe, 0x1}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={r7, 0x3, 0xfffffffffffffe00}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000020303000000000000000000a65400000800010001000000090002000000000002000000a02fcce903055640fd88236792dcec60028db36dc168fa00b97ab0cfa8064e7ac0bbb055957b47ed3811fb337950ebbda1be8cc09252aa8f0eae2230c9bab4876c6a89a8816f36f233e9db13c7e71e3699a2ea2c3ec87e5bfaa6b0d841208b07af3ca1f515531209622d1fd2beb10135bca149bddb0955222e60f9734728bbb951208c820db08f72d14e66b475acfe85f1f2ddb905d5e8552a09ec22f978b7"], 0x28}}, 0x0) 00:38:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100110f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000300), 0x2b) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x9836, @rand_addr=' \x01\x00', 0x900}, 0x1c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x2c0200, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={@private, @local, 0x0}, &(0x7f0000000580)=0xc) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000005c0)=r1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/247}, {&(0x7f0000000080)=""/5}, {&(0x7f0000001480)=""/4096}, {&(0x7f0000000200)=""/194}, {&(0x7f0000000340)=""/2}, {&(0x7f0000000400)=""/225}], 0x1000000000000274, 0x0, 0x0, 0x7115}, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000600)=""/133, 0x85, 0x20020, &(0x7f00000006c0)=@l2={0x1f, 0x7f, @none, 0xffff, 0x2}, 0x80) 00:38:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x18, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001001c0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb) 00:38:48 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000100)=""/26, 0x1a}], 0x3, 0xffffff12, 0x0) accept(r1, 0x0, &(0x7f0000000040)) sendto$inet(r1, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r1, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001001f0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:48 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4107, 0x100b}], 0x1, 0xfffe, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB='\'(', @ANYRES32, @ANYBLOB="00000000181241c5ae7b51", @ANYRES32=r2, @ANYBLOB="000000000000000018000000f7ffffff00000000010001006d960000ffffffff13475000fcffffff"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000580)=""/152, 0x40f00, 0x2, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x0, 0x80, 0xfffffbff}, 0x10, 0x1a6b5, r1}, 0x78) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x48}}, 0x0) pipe(0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x5, 0x5, 0x40, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x7, 0x800, 0x516d}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4107, 0x100b}], 0x1, 0xfffe, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x10, &(0x7f0000000480)={&(0x7f0000000800)=""/252, 0xfc, 0x0}}, 0x10) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x0, 0x0, 0x4, 0x1, 0x6, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x90}, @map={0x18, 0x5, 0x1, 0x0, r2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x7a, &(0x7f00000009c0)=""/122, 0x41000, 0x0, '\x00', r4, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x10, 0x2, 0x5}, 0x10, r6, r7}, 0x78) clone(0x0, &(0x7f0000000300)="1d12a8eecb3ec2cc3720683e8d696a2cfe555d89287ef2a10be1085956051ac3dc24837daa67a4b77ed914dae5b9cf431b571f6a7e371e632963efe4bcf62c363bc6f6831cad74821b863a3b4d3e46af2843503b78c91f2015f1ee623ce44412040397d608e760c6ebfc16bb5ee40d263124f2aa", &(0x7f0000000100), 0x0, &(0x7f00000003c0)="f34332") 00:38:48 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) write(r1, &(0x7f0000000000)="05", 0x1) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 00:38:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x22, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 00:38:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100200f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x76, [0x0, 0x1, 0x7, 0x8, 0x1, 0x3], 0x0, &(0x7f0000000080), &(0x7f0000000100)=""/118}, &(0x7f0000000200)=0x78) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600110200f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd) 00:38:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3e, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:49 executing program 0: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x1f, {0xc, 0x18, 0x9, 0x14, 0x2, 0x7ff, 0x5, 0x14f}}) perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001012d0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}]}, 0x34}}, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000000000010046) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@reiserfs_3={0xc, 0x3, {0x0, 0x9, 0x3}}, &(0x7f00000001c0), 0x1000) 00:38:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001002e0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1471.574780][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1471.625057][T14157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.794346][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.814822][T14157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.781692][ T967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.894100][ T967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.007849][ T967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.094445][ T967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0)=0xfffffffc, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000080)=""/13, 0xd}, 0x80000000}], 0x1, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, 0x0, 0x0) dup2(0xffffffffffffffff, r0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x240, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100350f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe) 00:38:52 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x5, 0x1000, 0x4, 0x40, 0x401, 0x80000000, 0x8}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x3f, 0x5, 0x0, 0x8, 0x0, 0xa76b, 0x20, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa903, 0x2, @perf_config_ext={0x3ff, 0x6}, 0x0, 0x7fff, 0xb8b, 0x1, 0x115d35bf, 0x10001, 0x7, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="e9830000000000000000320008000800030089b9ae7e9e2c6841238569491fbf9493a73bae131fef3a14be83459a3370af1e92df3af4db0685f211d562da5215158b53f4283a2f6f49d8c94150a6c164dd07fce51f01e6be8d3aaa8d4eeb89a1aac566662c17c315e0aeea41aa9ca5a751057f154c98edd41c8d896dfd619583d5d4de6372c00cfb326bccfb75aedc1abb", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x810, 0xffffffffffffffff, 0x4456d000) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x48098) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xfc, 0x6, @random="e07f900da69e"}, 0x14) r5 = socket(0x1, 0xa, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x8000000803, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf253b00000008320300439eb6b6d8f2e86d0c07570057cad7a969949e3a67c91614480bbd5fc8059d456ff0e931be4886c8215ae7fe717a97c88f8524311e5ffd546259e5babcf6ff91ddfa", @ANYRES32=0x0, @ANYBLOB="08002700030000000800270003000000050019010500000008002600a3090000080027000200000008005700ea12000005001801180000000800a1000400000008002201740000000400870004006c00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x3c00, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0600fffffff10000fe00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) 00:38:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001003f0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) 00:38:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x1d4c, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 00:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r1, &(0x7f0000000080)="8071b3df7e6a2b0309fd4f8510044a62d1ff0dd33e0845445e845e0edd8a9b4a861646be80a50ee9f0c1d3911b9a7c7c12009f15", 0x34, 0xc0, &(0x7f0000000100)={0x2, 0x1, @local}, 0x10) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100400f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1474.445527][ T967] device hsr_slave_0 left promiscuous mode [ 1474.472141][ T967] device hsr_slave_1 left promiscuous mode 00:38:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x3a98, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1474.538811][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 00:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x2480000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) [ 1474.610685][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 00:38:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100480f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1474.660719][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 00:38:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4c235aa1066ba2100b000ee440f07b9800000c00f3235000400d400910091b8010000000f01d9b90e020000ba008000000f30420f38c9ee420f928e00000000c48181c6080066bad104b0e3ee", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10) [ 1474.714857][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.779991][ T967] device bridge_slave_1 left promiscuous mode 00:38:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) accept(r0, 0x0, &(0x7f0000000040)) sendto$inet(r0, 0x0, 0x0, 0x200407f8, &(0x7f0000e68000)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x2000, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x7530, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 00:38:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000006001004c0f006000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000000040)="00810100000000000000005fc25ac8170c0738bbabddf4655fddf4655ef90000008779", 0x23, 0x1600}], 0x0, &(0x7f0000000400)=ANY=[]) [ 1474.856705][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.915134][ T967] device bridge_slave_0 left promiscuous mode [ 1474.934571][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.013627][ T967] device veth1_macvtap left promiscuous mode [ 1475.053181][ T967] device veth0_macvtap left promiscuous mode [ 1475.094235][ T967] device veth1_vlan left promiscuous mode [ 1475.143565][ T967] device veth0_vlan left promiscuous mode [ 1475.841099][ T967] team0 (unregistering): Port device team_slave_1 removed [ 1475.917097][ T967] team0 (unregistering): Port device team_slave_0 removed [ 1475.978943][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.058564][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.498099][ T967] bond0 (unregistering): Released all slaves [ 1481.033755][ T967] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.134355][ T967] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.253231][ T967] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.429381][ T967] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.501734][T14293] chnl_net:caif_netlink_parms(): no params data found [ 1481.707847][T14293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.723169][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.744268][T14293] device bridge_slave_0 entered promiscuous mode [ 1481.755028][T14293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.762824][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.772272][T14293] device bridge_slave_1 entered promiscuous mode [ 1481.910482][T14293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1481.961589][T14293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1482.258494][T14293] team0: Port device team_slave_0 added [ 1482.315336][T14293] team0: Port device team_slave_1 added [ 1482.430952][T14293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.449999][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.507234][T14293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.594409][T14293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.623635][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1482.662861][T14293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.776566][T32202] Bluetooth: hci1: command 0x0409 tx timeout [ 1482.842969][T14293] device hsr_slave_0 entered promiscuous mode [ 1482.853824][T14293] device hsr_slave_1 entered promiscuous mode [ 1482.889354][T14293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1482.914787][T14293] Cannot create hsr debugfs directory [ 1483.428974][ T967] IPVS: stopping master sync thread 2249 ... [ 1483.713660][T14293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.834437][ T967] device hsr_slave_0 left promiscuous mode [ 1483.863026][ T967] device hsr_slave_1 left promiscuous mode [ 1483.915308][ T967] device bridge_slave_1 left promiscuous mode [ 1483.964613][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.979616][ T967] device bridge_slave_0 left promiscuous mode [ 1483.986098][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.023296][ T967] device veth1_macvtap left promiscuous mode [ 1484.029635][ T967] device veth0_macvtap left promiscuous mode [ 1484.035750][ T967] device veth1_vlan left promiscuous mode [ 1484.042246][ T967] device veth0_vlan left promiscuous mode [ 1484.059035][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.065340][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.866756][T14190] Bluetooth: hci1: command 0x041b tx timeout [ 1485.184322][ T967] team0 (unregistering): Port device team_slave_1 removed [ 1485.267795][ T967] team0 (unregistering): Port device team_slave_0 removed [ 1485.298939][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.315525][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.536680][ T967] bond0 (unregistering): Released all slaves [ 1485.648142][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1485.656008][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1485.674758][T14293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.686905][ T967] ------------[ cut here ]------------ [ 1485.692878][ T967] refcount_t: decrement hit 0; leaking memory. [ 1485.703130][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1485.722359][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1485.753277][ T967] WARNING: CPU: 0 PID: 967 at lib/refcount.c:31 refcount_warn_saturate+0xbf/0x1e0 [ 1485.767850][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.774934][ T8215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.783030][ T967] Modules linked in: [ 1485.787372][ T967] CPU: 0 PID: 967 Comm: kworker/u4:4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1485.809557][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1485.817058][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.843392][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1485.851927][ T967] Workqueue: netns cleanup_net [ 1485.866305][ T967] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 1485.872410][ T967] Code: 1d dc ee 99 09 31 ff 89 de e8 4d 1b 95 fd 84 db 75 e0 e8 64 17 95 fd 48 c7 c7 60 7e 04 8a c6 05 bc ee 99 09 01 e8 17 03 28 05 <0f> 0b eb c4 e8 48 17 95 fd 0f b6 1d ab ee 99 09 31 ff 89 de e8 18 [ 1485.898677][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1485.917035][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.924122][ T8215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.963622][ T967] RSP: 0018:ffffc90004ac79e8 EFLAGS: 00010282 [ 1485.971740][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1485.980975][ T967] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1486.007805][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1486.037905][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1486.046533][ T967] RDX: ffff88801b960000 RSI: ffffffff815f3208 RDI: fffff52000958f2f [ 1486.054537][ T967] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1486.072351][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1486.081835][ T967] R10: ffffffff815ecfae R11: 0000000000000000 R12: ffff88807108e5b0 [ 1486.112967][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1486.125006][ T967] R13: ffff88807426a5a0 R14: fffffbfff1701e30 R15: dffffc0000000000 [ 1486.135733][T14501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1486.144857][ T967] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 1486.161828][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1486.171095][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1486.183663][ T967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1486.217272][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1486.226649][ T967] CR2: 00007f3c0a52f000 CR3: 000000001df35000 CR4: 00000000003526f0 [ 1486.232511][T14293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1486.234649][ T967] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1486.287197][T14293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1486.305371][ T967] DR3: 00000000b8fecd19 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1486.318685][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1486.360460][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1486.370949][ T967] Call Trace: [ 1486.377089][ T967] [ 1486.380043][ T967] vlan_dev_free+0xdc/0x100 [ 1486.384654][ T967] ? vlan_dev_netpoll_setup+0x120/0x120 [ 1486.396897][ T967] netdev_run_todo+0x6b4/0xa80 [ 1486.401760][ T967] ? generic_xdp_install+0x4a0/0x4a0 [ 1486.416299][ T967] ? default_device_exit+0x2d0/0x2d0 [ 1486.421714][ T967] ? unregister_netdevice_many+0x1850/0x1850 [ 1486.437674][ T967] ? sysfs_remove_group+0xc2/0x170 [ 1486.457190][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1486.464690][ T8202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1486.472439][ T967] ? br_dev_delete+0x112/0x190 [ 1486.489542][ T967] default_device_exit_batch+0x2ff/0x3c0 [ 1486.495226][ T967] ? unregister_netdev+0x20/0x20 [ 1486.515473][T14293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1486.519160][ T967] ? __init_waitqueue_head+0xd0/0xd0 [ 1486.586317][ T967] ? cfg802154_switch_netns+0x440/0x440 [ 1486.596348][ T967] ? unregister_netdev+0x20/0x20 [ 1486.601335][ T967] ? __dev_change_net_namespace+0x1330/0x1330 [ 1486.666782][ T967] ops_exit_list+0x10d/0x160 [ 1486.676698][ T967] cleanup_net+0x4ea/0xb00 [ 1486.681182][ T967] ? unregister_pernet_device+0x70/0x70 [ 1486.702682][ T967] process_one_work+0x9b2/0x1690 [ 1486.716617][ T967] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1486.722040][ T967] ? rwlock_bug.part.0+0x90/0x90 [ 1486.776454][ T967] ? _raw_spin_lock_irq+0x41/0x50 [ 1486.781539][ T967] worker_thread+0x658/0x11f0 [ 1486.791164][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1486.802472][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1486.818908][ T967] ? process_one_work+0x1690/0x1690 [ 1486.824154][ T967] kthread+0x405/0x4f0 [ 1486.865057][ T967] ? set_kthread_struct+0x130/0x130 [ 1486.880780][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1486.890665][ T967] ret_from_fork+0x1f/0x30 [ 1486.895139][ T967] [ 1486.899949][ T7932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1486.909164][ T967] Kernel panic - not syncing: panic_on_warn set ... [ 1486.915761][ T967] CPU: 0 PID: 967 Comm: kworker/u4:4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 1486.925403][ T967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1486.935470][ T967] Workqueue: netns cleanup_net [ 1486.940259][ T967] Call Trace: [ 1486.943543][ T967] [ 1486.946483][ T967] dump_stack_lvl+0xcd/0x134 [ 1486.951099][ T967] panic+0x2b0/0x6dd [ 1486.955053][ T967] ? __warn_printk+0xf3/0xf3 [ 1486.959669][ T967] ? __warn.cold+0x16c/0x2b5 [ 1486.964284][ T967] ? refcount_warn_saturate+0xbf/0x1e0 [ 1486.969765][ T967] __warn.cold+0x187/0x2b5 [ 1486.974200][ T967] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1486.980472][ T967] ? refcount_warn_saturate+0xbf/0x1e0 [ 1486.985954][ T967] report_bug+0x1bd/0x210 [ 1486.990347][ T967] handle_bug+0x3c/0x60 [ 1486.994521][ T967] exc_invalid_op+0x14/0x40 [ 1486.999044][ T967] asm_exc_invalid_op+0x12/0x20 [ 1487.003909][ T967] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 1487.009991][ T967] Code: 1d dc ee 99 09 31 ff 89 de e8 4d 1b 95 fd 84 db 75 e0 e8 64 17 95 fd 48 c7 c7 60 7e 04 8a c6 05 bc ee 99 09 01 e8 17 03 28 05 <0f> 0b eb c4 e8 48 17 95 fd 0f b6 1d ab ee 99 09 31 ff 89 de e8 18 [ 1487.029617][ T967] RSP: 0018:ffffc90004ac79e8 EFLAGS: 00010282 [ 1487.035704][ T967] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1487.043690][ T967] RDX: ffff88801b960000 RSI: ffffffff815f3208 RDI: fffff52000958f2f [ 1487.051680][ T967] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1487.059672][ T967] R10: ffffffff815ecfae R11: 0000000000000000 R12: ffff88807108e5b0 [ 1487.067690][ T967] R13: ffff88807426a5a0 R14: fffffbfff1701e30 R15: dffffc0000000000 [ 1487.075684][ T967] ? wake_up_klogd.part.0+0x8e/0xd0 [ 1487.080972][ T967] ? vprintk+0x88/0x90 [ 1487.085067][ T967] ? refcount_warn_saturate+0xbf/0x1e0 [ 1487.090552][ T967] vlan_dev_free+0xdc/0x100 [ 1487.095077][ T967] ? vlan_dev_netpoll_setup+0x120/0x120 [ 1487.100745][ T967] netdev_run_todo+0x6b4/0xa80 [ 1487.105543][ T967] ? generic_xdp_install+0x4a0/0x4a0 [ 1487.110848][ T967] ? default_device_exit+0x2d0/0x2d0 [ 1487.116154][ T967] ? unregister_netdevice_many+0x1850/0x1850 [ 1487.122158][ T967] ? sysfs_remove_group+0xc2/0x170 [ 1487.127296][ T967] ? br_dev_delete+0x112/0x190 [ 1487.132077][ T967] default_device_exit_batch+0x2ff/0x3c0 [ 1487.137738][ T967] ? unregister_netdev+0x20/0x20 [ 1487.142698][ T967] ? __init_waitqueue_head+0xd0/0xd0 [ 1487.148002][ T967] ? cfg802154_switch_netns+0x440/0x440 [ 1487.153560][ T967] ? unregister_netdev+0x20/0x20 [ 1487.158512][ T967] ? __dev_change_net_namespace+0x1330/0x1330 [ 1487.164600][ T967] ops_exit_list+0x10d/0x160 [ 1487.169211][ T967] cleanup_net+0x4ea/0xb00 [ 1487.173653][ T967] ? unregister_pernet_device+0x70/0x70 [ 1487.179230][ T967] process_one_work+0x9b2/0x1690 [ 1487.184196][ T967] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1487.189587][ T967] ? rwlock_bug.part.0+0x90/0x90 [ 1487.194545][ T967] ? _raw_spin_lock_irq+0x41/0x50 [ 1487.199598][ T967] worker_thread+0x658/0x11f0 [ 1487.204304][ T967] ? process_one_work+0x1690/0x1690 [ 1487.209523][ T967] kthread+0x405/0x4f0 [ 1487.213609][ T967] ? set_kthread_struct+0x130/0x130 [ 1487.218834][ T967] ret_from_fork+0x1f/0x30 [ 1487.223285][ T967] [ 1487.226818][ T967] Kernel Offset: disabled [ 1487.231331][ T967] Rebooting in 86400 seconds..