08:02:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000000)={'vcan0\x00', @ifru_names='nr0\x00'}) 08:02:57 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000080), 0x4) 08:02:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) 08:02:57 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @private2, @rand_addr=' \x01\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x210}) 08:02:57 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x0, 0x0) 08:02:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x5, &(0x7f0000000100)=0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 08:02:57 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x1, 0x0, 0x0) 08:03:00 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x1, 0x0, 0x0) 08:03:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 08:03:00 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0) 08:03:00 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:03:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040), 0x4) 08:03:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @dev, 0x0, 0x0, 'wrr\x00'}, 0x2c) 08:03:00 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x1, 0x0, 0x0) [ 255.598972][T10530] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 08:03:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r2, &(0x7f0000000140)=@ll, 0x80) 08:03:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:03:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) 08:03:00 executing program 3: setpriority(0x1, 0x0, 0x10) 08:03:01 executing program 2: unshare(0x400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0x8f8, 0x0, 0x101}, 0x20, 0x1, 0x400}) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000140)={0x78b153dfde6f2f39, 0xffffffff, 0x6, 0x9, 0x20, 0x8, 0x5}) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) getsockopt$rose(r3, 0x104, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x4004012, r3, 0x6000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x6) 08:03:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x3) 08:03:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f00000003c0)) 08:03:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) 08:03:01 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00'}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) 08:03:01 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="6a6e74173199aaaaaaaaaabb86dd607248b200442f00fe800008000000000000000000bbfe8000000000000000000000000000000420880b"], 0x0) 08:03:01 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) 08:03:01 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @private2, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x210}) 08:03:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6db6e559) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='sy'], 0x6) 08:03:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 08:03:01 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0x1, @output}) 08:03:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:02 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc33760036394000b6aed12f0000001500ae477aa94d0cac35f3232f9f27ee276471db2c6c5ee96b808d60d955e5345bc2d5a55d0c09863229931303407a428b80d42045f1126bc958a9302ac51cf4e97a902b08d4498b1d28f7f71cbc", 0x65}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000880)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) 08:03:02 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e21, 0xffffffff, 'none\x00', 0x4}, 0x2c) 08:03:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={[0xfc], [], @multicast1}, @private2, @rand_addr=' \x01\x00', 0x0, 0x0, 0x4, 0x100, 0x9, 0x210}) 08:03:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000}) 08:03:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c27bc33760036394000b6aed12f0000001500ae477aa94d0cac35f3232f9f27ee276471db", 0x2b}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:02 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2}, 0x8) 08:03:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) 08:03:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x117, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:02 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x31}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'wp512\x00'}}, 0x0, &(0x7f00000010c0)=""/49) 08:03:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r7) [ 257.304037][T10635] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:03:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:05 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 08:03:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, 0x0) 08:03:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0xfffb) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14}, 0x14) 08:03:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:05 executing program 1: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/49, &(0x7f0000000180)=0x31) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/38, 0x26}], 0x10, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 08:03:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4182) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x0) 08:03:05 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 08:03:05 executing program 1: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/49, &(0x7f0000000180)=0x31) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/38, 0x26}], 0x10, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) [ 260.180052][T10679] ptrace attach of "/root/syz-executor.1"[9080] was attempted by "/root/syz-executor.1"[10679] 08:03:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = semget$private(0x0, 0x207, 0x0) semctl$IPC_RMID(r2, 0x2, 0x10) 08:03:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380100001a000108cf4dac26306b6835397c1e7fac00000000000000007485ac5fb0e3daef21b20c80fb031a0c53b2862f5d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000000000000000000000000000000000010000e6ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000100000000000000000000000000000000000020001000000000000000000480003"], 0x138}}, 0x0) 08:03:05 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) [ 260.327875][T10687] ptrace attach of "/root/syz-executor.1"[9080] was attempted by "/root/syz-executor.1"[10687] 08:03:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 08:03:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000001180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "4df1d4a62179fc59577259376935dde099b30b6a70e08c40055e2b5db4ed71f3"}) 08:03:08 executing program 1: getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/49, &(0x7f0000000180)=0x31) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/38, 0x26}], 0x10, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 08:03:08 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) 08:03:08 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='~'], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7248b2", 0x44, 0x2f, 0x0, @remote, @dev}}}}, 0x0) [ 263.123018][T10711] ptrace attach of "/root/syz-executor.1"[9080] was attempted by "/root/syz-executor.1"[10711] 08:03:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010163, 0x0) 08:03:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{}, "a9062419bc2194de", "3b19d727acca77977af13543e559b738", '\'|15', "233527c838a16a90"}, 0x28) 08:03:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 08:03:08 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='~'], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x40, &(0x7f0000000140)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f27d0076cc03592a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x30}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_DEV_DESTROY(r0, 0x5502) 08:03:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x82, &(0x7f0000000640)={@random="00fe6800", @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, ')Z\v', 0x4c, 0x2f, 0x0, @remote, @mcast1, {[@fragment={0x33}]}}}}}, 0x0) 08:03:11 executing program 5: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000104539302000000000000000000", @ANYRES32=r5, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 08:03:11 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='~'], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 266.216403][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 266.232933][T10760] device macvlan1 entered promiscuous mode [ 266.240518][T10764] input: syz1 as /devices/virtual/input/input9 08:03:11 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='~'], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 266.259924][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 08:03:11 executing program 2: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000000c0), 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x20000800) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000349000/0x3000)=nil, 0x3000, 0x3) 08:03:11 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:11 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 266.358705][T10776] input: syz1 as /devices/virtual/input/input10 08:03:11 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, 0x0) [ 266.439442][T10785] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.5 proc:/self/fd/3' not defined. 08:03:11 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x0) 08:03:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:14 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) 08:03:14 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000100)={@broadcast, @random="a5c772dc9e36", @val={@void, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "e62a059060f3dd61ab4fc463578e616ef8e6256b6de66d5e4fb3f852d38a084d3d1e0f7b540fd77ae0947196a383cf25a8106584604fc0f72086c77e38b230ee"}}}}, 0x0) 08:03:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="6a6e74173199", @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7248b2", 0x44, 0x2f, 0x0, @remote, @dev}}}}, 0x0) 08:03:14 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 08:03:14 executing program 1: sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x30}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) 08:03:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000140)) 08:03:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r5) 08:03:14 executing program 4: execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:14 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000001180)='/dev/swradio#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) poll(&(0x7f0000000100)=[{r0, 0x101}, {r1, 0x6415}], 0x2, 0x0) 08:03:14 executing program 4: r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 269.796922][ T27] audit: type=1800 audit(1592380995.050:2): pid=10834 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=15882 res=0 08:03:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000180)) 08:03:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) 08:03:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x38}}, 0x0) 08:03:17 executing program 4: r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r4, 0x0, 0xfc3) 08:03:17 executing program 4: r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x8) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="12", 0x1}], 0x1}}], 0x1, 0x0) 08:03:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:17 executing program 4: memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:17 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32, @ANYBLOB="0000000bf1ffffff"], 0x8d0}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 08:03:17 executing program 1: r0 = semget(0x1, 0x0, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 272.634621][T10895] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.2'. 08:03:20 executing program 4: memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:20 executing program 5: r0 = dup(0xffffffffffffffff) write$P9_RSTATFS(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:03:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x2da, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0ee7bd", 0x2a4, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff}, @dstopts={0x0, 0x1, [], [@generic, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts, @dstopts={0x0, 0x4c, [], [@enc_lim, @generic={0x0, 0x25c, "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"}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 08:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0ee7bd", 0x10, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 08:03:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:03:20 executing program 4: memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:03:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x810fffb) 08:03:20 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3a0, 0xd0, 0x1f8, 0x0, 0xd0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@ipv6={@local, @private0, [], [], 'macvlan0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 08:03:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:20 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3a0, 0xd0, 0x1f8, 0x0, 0xd0, 0x0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@ipv6={@local, @private0, [], [], 'macvlan0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast1, @mcast1, [], [], 'dummy0\x00', 'vcan0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) [ 275.632134][T10932] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 08:03:20 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) [ 275.685064][ T27] audit: type=1800 audit(1592381000.940:3): pid=10931 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cpuacct.usage_all" dev="sda1" ino=15907 res=0 [ 275.803387][T10945] x_tables: ip6_tables: REJECT target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD/OUTPUT 08:03:23 executing program 1: 08:03:23 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x7c, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0xe8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "0bfa32699cb34fcf4cc879ff1a946ccc0b8fbe086a43fb308a45405bd236"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0xff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x408) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa140806000108000604"], 0x0) eventfd2(0x0, 0x0) 08:03:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:23 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) 08:03:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:23 executing program 5: 08:03:23 executing program 5: 08:03:23 executing program 1: 08:03:23 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) 08:03:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) setns(0xffffffffffffffff, 0x0) 08:03:23 executing program 5: 08:03:24 executing program 1: 08:03:24 executing program 2: 08:03:24 executing program 5: 08:03:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:26 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 08:03:26 executing program 1: 08:03:26 executing program 5: 08:03:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) setns(0xffffffffffffffff, 0x0) 08:03:26 executing program 2: 08:03:26 executing program 2: 08:03:27 executing program 1: 08:03:27 executing program 5: 08:03:27 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 08:03:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unshare(0x8020000) setns(0xffffffffffffffff, 0x0) 08:03:27 executing program 5: 08:03:27 executing program 2: 08:03:27 executing program 1: 08:03:27 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x04\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 08:03:27 executing program 2: 08:03:27 executing program 1: 08:03:27 executing program 5: 08:03:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:27 executing program 2: 08:03:27 executing program 4: 08:03:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:30 executing program 1: 08:03:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:30 executing program 4: 08:03:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 08:03:30 executing program 2: 08:03:30 executing program 1: 08:03:30 executing program 2: 08:03:30 executing program 4: 08:03:30 executing program 5: 08:03:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:30 executing program 2: 08:03:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:33 executing program 4: 08:03:33 executing program 1: 08:03:33 executing program 5: 08:03:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:33 executing program 2: 08:03:33 executing program 2: 08:03:33 executing program 4: 08:03:33 executing program 5: 08:03:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r0, 0x0) 08:03:33 executing program 1: 08:03:33 executing program 2: 08:03:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:36 executing program 4: 08:03:36 executing program 2: 08:03:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r0, 0x0) 08:03:36 executing program 5: 08:03:36 executing program 1: 08:03:36 executing program 4: 08:03:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r0, 0x0) 08:03:36 executing program 2: 08:03:36 executing program 1: 08:03:36 executing program 5: 08:03:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) [ 293.195632][ T0] NOHZ: local_softirq_pending 08 08:03:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 08:03:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x10000, 0x101182) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "004552b460e433018c472c96d05d3237ee277335640bc6d460bf2e295ce297d8d2ed87d947c617ea8eaf7996075577225fdd8853558dddd400", "cb4c4b8f0d4b6d54502d044084626dce634bf6d476de7640c0af68c4e510ff3aa7fa82bd794cfd23af176410ff8d38354f07afdc1fc8e43cc439a8fb66fd0498", "1f000000000001009600303a6c965f7b107a32e4a4a8aef69f7e9a683860ce53"}) 08:03:39 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:03:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:39 executing program 4: semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0xb6}, {0x1, 0x2, 0x800}], 0x2, 0x0) 08:03:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:03:39 executing program 4: 08:03:39 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:39 executing program 2: unshare(0xc020400) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 08:03:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x0, 0x1}, 0x40) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000007, 0x13, r0, 0x0) 08:03:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:42 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 08:03:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:42 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000080)={0xffffffffffffffa9, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xff3a}}}, 0x19}}, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYBLOB="070f29"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:42 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 08:03:42 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:03:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:42 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:03:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000180)=""/214, 0xd6}], 0x1, 0x0) 08:03:42 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 08:03:42 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 08:03:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) 08:03:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:45 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 08:03:45 executing program 4: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x620d99d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 08:03:45 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:03:45 executing program 1: r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000240)={0xff}) [ 300.499313][T11249] IPVS: ftp: loaded support on port[0] = 21 08:03:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r1, 0x0) 08:03:45 executing program 1: migrate_pages(0x0, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) 08:03:45 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010000104080000c6d5611a6f9ee4e5e6", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100766c616e000020001c0002800600010004000080040003800c00020010000000136d000008000500", @ANYRES32=r1], 0x5c}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000022d, 0x0) [ 300.631021][T11282] IPVS: ftp: loaded support on port[0] = 21 08:03:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:46 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) [ 300.724759][T11300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.740892][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:03:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r3, &(0x7f0000000040)=""/50, 0x32) 08:03:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:48 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:03:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) 08:03:48 executing program 4: 08:03:48 executing program 4: 08:03:48 executing program 1: 08:03:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:48 executing program 2: 08:03:49 executing program 2: 08:03:49 executing program 4: 08:03:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:51 executing program 1: 08:03:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:51 executing program 2: 08:03:51 executing program 4: 08:03:51 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:52 executing program 2: 08:03:52 executing program 4: 08:03:52 executing program 1: 08:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x918c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x46050) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000000c0)=""/35) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:03:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x83, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0x10, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) clone(0x8000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffff9}, 0x1, 0x0, 0x80000000000001}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x40000e0, 0xff00) socket$inet6(0xa, 0x0, 0xc) 08:03:54 executing program 2: 08:03:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x918c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x46050) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000000c0)=""/35) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:03:54 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:03:55 executing program 2: 08:03:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r2, 0x0) 08:03:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:55 executing program 2: 08:03:55 executing program 1: 08:03:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:03:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x83, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0x10, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) clone(0x8000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffff9}, 0x1, 0x0, 0x80000000000001}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x40000e0, 0xff00) socket$inet6(0xa, 0x0, 0xc) 08:03:58 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) 08:03:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) 08:03:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(r3, 0x0) 08:03:58 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:03:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, 0x0) setns(r3, 0x0) 08:03:58 executing program 1: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) 08:03:58 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x918c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x4000) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000ffdbdf250200000014000600776732000000000000000000000000000c000500e0000001"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x46050) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x2, 0x4, 0x0) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000000c0)=""/35) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) fstat(0xffffffffffffffff, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 08:03:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, 0x0) setns(r3, 0x0) 08:03:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x83, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0x10, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) clone(0x8000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffff9}, 0x1, 0x0, 0x80000000000001}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x40000e0, 0xff00) socket$inet6(0xa, 0x0, 0xc) 08:03:58 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r3) dup3(r2, r3, 0x0) 08:04:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs$namespace(0x0, 0x0) setns(r3, 0x0) 08:04:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07010000060000000000000000000000000000000000100008000000001000000529"], 0x22) pipe(&(0x7f0000000200)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 08:04:01 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 08:04:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 08:04:01 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 315.962071][T11517] input: syz0 as /devices/virtual/input/input11 08:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(0xffffffffffffffff, 0x0) 08:04:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 316.044888][T11531] input: syz0 as /devices/virtual/input/input12 08:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(0xffffffffffffffff, 0x0) 08:04:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') sendfile(r1, r2, 0x0, 0x1) 08:04:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000180)={0xfffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 08:04:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') setns(0xffffffffffffffff, 0x0) 08:04:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) semop(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semop(0x0, &(0x7f00000001c0)=[{0x0, 0xffff}], 0x1) semop(0x0, 0x0, 0x0) 08:04:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) poll(&(0x7f0000000400)=[{r2}, {r3, 0x56c703109fd34d40}], 0x2, 0xa9d) 08:04:04 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:04 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "e546e9bed0e63775"}) 08:04:04 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000100)=0x5, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 08:04:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 08:04:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 08:04:04 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:04 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:04 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 08:04:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 08:04:07 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:07 executing program 0: pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7b, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40009, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfdffbffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}}, 0x0) 08:04:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000180)={0x0, "a1059de6c55e383d8cd74f843e49cd3a0db4343899017bdb19d8e4cc4f3fd736", 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200006) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(r5, r4, 0x0, 0x80001d00c0d0) 08:04:07 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:07 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x17f, &(0x7f0000000400)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 08:04:07 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:07 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000100)=@pppol2tpv3={0x2}, 0x80) 08:04:07 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:10 executing program 1: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:04:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:10 executing program 4: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 08:04:10 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:10 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007d00000005f3"], 0x112) 08:04:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) [ 325.412127][T11696] EXT4-fs (loop4): Unrecognized mount option "./B" or missing value [ 325.422129][T11696] EXT4-fs (loop4): failed to parse options in superblock: ./B [ 325.432381][T11696] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 325.445918][T11696] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 325.457847][T11696] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 325.469460][T11696] EXT4-fs error (device loop4): ext4_fill_super:4569: inode #2: comm syz-executor.4: iget: root inode unallocated [ 325.484567][T11696] EXT4-fs (loop4): get root inode failed [ 325.491523][T11696] EXT4-fs (loop4): mount failed 08:04:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a05, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6600000001379c5add692d0a404c9927e6226896cb1f8014ff506f46cec076eeb3e3e3759e2e77149c4480bff6de5fc02bfd3b2e1fc93ca5279e2a8b01342c285e9744392de1d1f9c86b9164637f63e2dc39dc6d22ea956269c3668d53"], &(0x7f0000000040)=0x6e) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x4}, 0x8) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200006) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(r5, r4, 0x0, 0x80001d00c0d0) 08:04:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) [ 325.610840][T11718] EXT4-fs (loop4): Unrecognized mount option "./B" or missing value [ 325.618989][T11718] EXT4-fs (loop4): failed to parse options in superblock: ./B [ 325.630048][T11718] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 325.640195][T11718] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 325.652960][T11718] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 325.663728][T11718] EXT4-fs error (device loop4): ext4_fill_super:4569: inode #2: comm syz-executor.4: iget: root inode unallocated [ 325.680125][T11718] EXT4-fs (loop4): get root inode failed [ 325.686679][T11718] EXT4-fs (loop4): mount failed 08:04:11 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:11 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000180)={0x0, "a1059de6c55e383d8cd74f843e49cd3a0db4343899017bdb19d8e4cc4f3fd736", 0x0, 0x0, 0x0, 0x4, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a05, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200006) sendfile(r4, r5, 0x0, 0x80001d00c0d0) sendfile(r5, r4, 0x0, 0x80001d00c0d0) 08:04:11 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) 08:04:11 executing program 1: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:04:13 executing program 0: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000001040)=""/4096) 08:04:13 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) 08:04:13 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 08:04:13 executing program 1: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000380)={0x0, r1+30000000}, 0x0) 08:04:13 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1c2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f00000000c0)=""/56) dup(r1) fanotify_init(0x20, 0x402) 08:04:13 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) [ 328.572316][ C1] sd 0:0:1:0: [sg0] tag#7332 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 328.582713][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB: Test Unit Ready [ 328.589157][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.598731][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.608297][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.617866][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.627452][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.637154][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.646725][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.654947][T11773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.656307][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08:04:13 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) [ 328.656332][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.681995][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.691575][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.701135][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 328.710718][ C1] sd 0:0:1:0: [sg0] tag#7332 CDB[c0]: 00 00 00 00 00 00 00 00 08:04:14 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) [ 328.763044][T11773] 8021q: adding VLAN 0 to HW filter on device bond2 08:04:14 executing program 4: clone(0x8100000, &(0x7f00000002c0)="b9", &(0x7f0000000180), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 08:04:14 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="7000000010001f0700"/20, @ANYRES32=0x0, @ANYBLOB="1f00000000140000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008f00030000000000000008000a00b4"], 0x70}}, 0x0) r1 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x492492492492778, 0x0) 08:04:14 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x7) 08:04:14 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:14 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:16 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4) 08:04:16 executing program 1: clone(0x8100000, &(0x7f00000002c0)="b9", &(0x7f0000000180), 0x0, 0x0) 08:04:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xea7}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1000001bd) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad2c68000794d5db0694dcbfff00000100c3"], 0x9) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, 0x0, 0xb13, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}}, 0x4002810) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7a939bc5}}}, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:04:16 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:16 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240), 0x2305e2b7) dup3(r2, r1, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) 08:04:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000800)=ANY=[@ANYBLOB="0800000000000000010000009f"]) 08:04:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:17 executing program 1: 08:04:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xea7}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1000001bd) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad2c68000794d5db0694dcbfff00000100c3"], 0x9) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, 0x0, 0xb13, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}}, 0x4002810) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7a939bc5}}}, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:04:17 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:18 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240), 0x2305e2b7) dup3(r2, r1, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) 08:04:18 executing program 1: 08:04:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xea7}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1000001bd) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad2c68000794d5db0694dcbfff00000100c3"], 0x9) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, 0x0, 0xb13, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}}, 0x4002810) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7a939bc5}}}, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:04:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:18 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) [ 334.156259][ T0] NOHZ: local_softirq_pending 08 08:04:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000080)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0xea7}, 0x100) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x1000001bd) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="ad2c68000794d5db0694dcbfff00000100c3"], 0x9) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x60, 0x0, 0xb13, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x60}}, 0x4002810) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x5, @local, 0x7a939bc5}}}, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x0, {{0x0, 0x0, 0x7}}}, 0x18) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) 08:04:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}, {&(0x7f0000000180)="ad", 0x1}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:20 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:20 executing program 1: 08:04:20 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) poll(0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240), 0x2305e2b7) dup3(r2, r1, 0x0) read$FUSE(r1, &(0x7f0000000240), 0x2305e2b7) 08:04:20 executing program 1: 08:04:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:20 executing program 1: 08:04:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:20 executing program 1: 08:04:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:23 executing program 1: 08:04:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:23 executing program 4: 08:04:23 executing program 0: 08:04:23 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:23 executing program 0: 08:04:23 executing program 4: 08:04:23 executing program 1: 08:04:23 executing program 0: 08:04:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:26 executing program 4: 08:04:26 executing program 0: 08:04:26 executing program 1: 08:04:26 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200), 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:26 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:26 executing program 0: 08:04:26 executing program 1: 08:04:26 executing program 4: 08:04:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:26 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:26 executing program 1: 08:04:26 executing program 0: 08:04:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:26 executing program 4: 08:04:26 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, 0x0, 0x0, 0x0) 08:04:27 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:27 executing program 1: 08:04:27 executing program 0: 08:04:27 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{0x0}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:27 executing program 4: 08:04:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, 0x0, 0x0, 0x0) 08:04:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, 0x0, 0x0, 0x0) 08:04:27 executing program 0: 08:04:27 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:27 executing program 1: 08:04:27 executing program 4: 08:04:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:28 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:28 executing program 4: 08:04:28 executing program 0: 08:04:28 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x800, 0x9, 0x400, 0x1}, 0x40) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) 08:04:28 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:28 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:28 executing program 4: 08:04:28 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9", 0x4}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:28 executing program 0: 08:04:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:28 executing program 1: 08:04:29 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:29 executing program 4: 08:04:29 executing program 0: 08:04:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9", 0x4}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:29 executing program 1: 08:04:29 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:29 executing program 4: 08:04:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9", 0x4}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:29 executing program 0: [ 344.351764][T12212] ptrace attach of "/root/syz-executor.3"[12211] was attempted by "/root/syz-executor.3"[12212] 08:04:29 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:29 executing program 1: 08:04:29 executing program 4: [ 344.507393][T12226] ptrace attach of "/root/syz-executor.3"[12225] was attempted by "/root/syz-executor.3"[12226] 08:04:30 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:30 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9", 0x6}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:30 executing program 0: 08:04:30 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:30 executing program 1: 08:04:30 executing program 4: 08:04:30 executing program 0: 08:04:30 executing program 1: 08:04:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:30 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9", 0x6}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) [ 345.296933][T12251] ptrace attach of "/root/syz-executor.3"[12249] was attempted by "/root/syz-executor.3"[12251] 08:04:30 executing program 4: 08:04:30 executing program 0: 08:04:31 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:31 executing program 1: 08:04:31 executing program 0: 08:04:31 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9", 0x6}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:31 executing program 4: 08:04:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:31 executing program 4: 08:04:31 executing program 1: 08:04:31 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5", 0x7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:31 executing program 0: 08:04:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:31 executing program 1: 08:04:32 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:32 executing program 0: 08:04:32 executing program 4: 08:04:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5", 0x7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:32 executing program 1: 08:04:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:32 executing program 0: 08:04:32 executing program 4: 08:04:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5", 0x7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x7) 08:04:32 executing program 1: 08:04:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:33 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:33 executing program 0: 08:04:33 executing program 4: 08:04:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:33 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x7) 08:04:33 executing program 1: 08:04:33 executing program 4: 08:04:33 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x7) 08:04:33 executing program 0: 08:04:33 executing program 1: 08:04:33 executing program 4: 08:04:33 executing program 0: 08:04:34 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:34 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x7) 08:04:34 executing program 1: 08:04:36 executing program 0: 08:04:36 executing program 4: 08:04:36 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:36 executing program 1: 08:04:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:36 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:36 executing program 4: 08:04:36 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:36 executing program 0: 08:04:36 executing program 1: 08:04:36 executing program 4: 08:04:36 executing program 0: 08:04:36 executing program 1: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000280), 0x1033b) fdatasync(r0) 08:04:36 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x7) 08:04:36 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x8040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 08:04:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30}, 0x30) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) quotactl(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 08:04:39 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:39 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:39 executing program 0: 08:04:39 executing program 0: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 08:04:39 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x7) 08:04:39 executing program 0: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:40 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:04:40 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x6) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) 08:04:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:04:42 executing program 0: 08:04:42 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, &(0x7f0000000a80)=""/231) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:42 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$inet(0x2, 0x803, 0x1) getsockopt(r2, 0x2000000000ff, 0x40000000001, 0x0, 0xffffffffffffffff) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000140)=""/26, &(0x7f00000002c0)=0x1a) r3 = socket$netlink(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x90}}, 0x0) 08:04:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_SSID={0xb, 0x34, "9b66036e0b99b6"}]}, 0x20}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x367, @time}) 08:04:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)="de79c0f9a2d9e5e6", 0x8}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:04:42 executing program 1: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7}, 0x7) fdatasync(r0) 08:04:42 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x68, 0x0, 0x0, 0x2, 0x11, 0x94321d9d3726abf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x50, 0x4, 0x3, 0x8, 0x0, 0x0, 0x8005}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) 08:04:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) 08:04:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:45 executing program 2: 08:04:45 executing program 1: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002240)=[{&(0x7f00000011c0)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a", 0x7b}, {0x0, 0x0, 0xffdfffffffff2c9d}], 0x0, 0x0) 08:04:45 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0x7, 0x2}, 0x8000, 0xfff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xb) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000c6fcdc0000", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010"], 0x28}}, 0x0) 08:04:45 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 360.479941][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 08:04:45 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) [ 360.549879][ T5] XFS (loop1): SB sanity check failed [ 360.556125][ T5] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x241/0x2b0, xfs_sb block 0xffffffffffffffff [ 360.571698][ T5] XFS (loop1): Unmount and run xfs_repair [ 360.578228][ T5] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 360.586227][ T5] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 08:04:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) [ 360.595894][ T5] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 360.604840][ T5] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 360.608052][T12601] team0: Port device veth3 added [ 360.614781][ T5] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 360.628561][ T5] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 360.638515][ T5] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:04:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCGETS(r0, 0x5437, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 360.683299][ T5] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00 ...Z.$.......... [ 360.711004][ T5] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 00 00 00 00 00 ................ [ 360.739603][T12587] XFS (loop1): SB validate failed with error -117. 08:04:46 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) [ 360.831056][T12625] EXT4-fs (loop0): quotafile must be on filesystem root [ 360.872295][T12587] XFS (loop1): SB sanity check failed [ 360.878861][T12587] XFS (loop1): Metadata corruption detected at xfs_sb_read_verify+0x241/0x2b0, xfs_sb block 0xffffffffffffffff [ 360.911965][T12587] XFS (loop1): Unmount and run xfs_repair [ 360.918880][T12587] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 360.937668][T12625] EXT4-fs (loop0): quotafile must be on filesystem root [ 360.949866][T12587] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 360.972340][T12587] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:04:46 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) 08:04:46 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000980)="b9ff0300600d698cff9e14f008004de7f9c764362ae28e79667717032de9bda08b79", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 361.037524][T12587] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 361.062719][T12587] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 361.118014][T12587] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 361.150017][T12587] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 361.162267][T12587] 00000060: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00 ...Z.$.......... [ 361.182733][T12587] 00000070: 00 00 00 00 00 ec 00 00 0c 09 0a 00 00 00 00 00 ................ [ 361.213054][T12587] XFS (loop1): SB validate failed with error -117. 08:04:46 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x26280) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:46 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:04:46 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="0e"}) [ 361.457902][T12791] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 361.469848][T12792] binder: 12788:12792 ioctl c0306201 0 returned -14 [ 361.487254][T12792] binder: 12788:12792 ioctl c0306201 20000240 returned -11 [ 361.530190][T12799] binder: 12788:12799 ioctl c0306201 0 returned -14 08:04:46 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:04:46 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:46 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="980a7bac3b3974a5132e1f5835ef35b2c02788635c942e95a319b5d66c9052514b65a965e80dd74bedd6efa60720e71f191a0c51179707328eae7d112e059e1a890cd759e593b452058cb6b89932f59be3812c535108359dadd1aabc2f2eea6c7ef51c9404a65d9a0b2c7359123dffda8afa456dc67e3468e775074d179a929f0d03b8414faaf6", 0x87}, {&(0x7f0000000200)="37dff5247eb1590e200fcae363d55a05a5b38c1a9cc55f50de4b022afd7346aab42c489b998c99bef153", 0x2a}], 0x2) 08:04:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 08:04:49 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, 0x0, 0x0) 08:04:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:49 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 08:04:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:04:49 executing program 1: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x4400, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x0, 0x590, 0x100}, 0x10) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xb) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed02000af9fdffff01004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff6", 0x3d}], 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 08:04:49 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81801) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002840)={0x90, 0x0, 0x2}, 0x90) 08:04:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:52 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r0}) 08:04:52 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:52 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:52 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 08:04:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0) 08:04:52 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) socket(0x2, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80), 0x4924924924924bd, 0x0) 08:04:55 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) 08:04:55 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:04:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, 0x0) 08:04:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:55 executing program 4: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:55 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000580)="22f6776fa5d9dad73c1e72b776b20a5f650e754c113e6f54aa96c8e3739eae72f1729feccf7e506597e9bac6833d798aaec85d2a9c2cbbee23ee8452cf1cc919c0c7fe6589ccfbfcd7aff3f18c949bfdfa73201372561dc26e0b8aa0d4530c73ed2df5f257bf718cf055be0d21f7", 0x6e}, {&(0x7f0000000340)="db859186b3b309f5ba1b59491af27878", 0x10}], 0x2) 08:04:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:04:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:58 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:04:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@uid={'uid', 0x3d, r3}}]}) 08:04:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002b80)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 08:04:58 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 08:04:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 373.118968][T13053] hfs: uid requires an argument [ 373.123838][T13053] hfs: unable to parse mount options 08:04:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:58 executing program 1: open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x801e}) creat(&(0x7f0000000300)='./file0\x00', 0x9) creat(&(0x7f0000000040)='./bus\x00', 0x0) 08:04:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x1}}, 0x26) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 08:04:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:04:58 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) [ 373.380939][T13074] EXT4-fs error (device sda1): mb_free_blocks:1452: group 7, inode 16380: block 235550:freeing already freed block (bit 6174); block bitmap corrupt. [ 373.396143][T13074] EXT4-fs error (device sda1): ext4_mb_generate_buddy:744: group 7, block bitmap and bg descriptor inconsistent: 28637 vs 28640 free clusters [ 373.410689][T13074] EXT4-fs (sda1): pa 0000000054412d37: logic 32768, phys. 235520, len 2048 [ 373.419305][T13074] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3863: group 7, free 2018, pa_free 2015 08:05:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7573726a71756f74613d83"]) 08:05:01 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:05:01 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 08:05:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 376.198602][T13118] EXT4-fs (loop1): journaled quota format not specified 08:05:01 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:05:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 376.354365][T13118] EXT4-fs (loop1): journaled quota format not specified 08:05:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = dup2(r2, r1) setsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:01 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r0, r1, 0x0) 08:05:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:04 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:05:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x3}}, 0x2e) 08:05:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:04 executing program 5: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 08:05:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:04 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:05:04 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:05:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:04 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:07 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:05:07 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 08:05:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:07 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:07 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 08:05:07 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:05:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x3}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 08:05:07 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:10 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:10 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:05:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:10 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:10 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:10 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 08:05:10 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:10 executing program 5: socket(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:11 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:11 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 08:05:11 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:11 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 08:05:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:13 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:13 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 08:05:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:14 executing program 0: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:14 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:05:14 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, r0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:14 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, r0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:14 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:14 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:05:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:15 executing program 2: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, r0) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:15 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:15 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:05:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:15 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(r0, r1, 0x0, 0x800000bf) 08:05:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:15 executing program 5: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) 08:05:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "221fa7b1aeef0cf24c0a4e69a00bfdd4e4a002"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000900)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@weak_binder={0x66642a85, 0x0, 0xfffffffffffffffd}, @flat=@weak_binder, @flat=@weak_handle}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x2, 0x0}) [ 390.514439][T13537] FAT-fs (loop0): bogus number of reserved sectors [ 390.542886][T13537] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:15 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 390.653459][T13546] binder: BINDER_SET_CONTEXT_MGR already set [ 390.662959][T13546] binder: 13544:13546 ioctl 40046207 0 returned -16 [ 390.672692][T13550] binder: BINDER_SET_CONTEXT_MGR already set [ 390.689432][T13550] binder: 13544:13550 ioctl 40046207 0 returned -16 08:05:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 390.847525][T13561] FAT-fs (loop0): bogus number of reserved sectors [ 390.854049][T13561] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:18 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:18 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0}}, 0x8040) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a35704000000b6215dd33459"}}], 0xffffff01) 08:05:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 393.298848][T13590] FAT-fs (loop0): bogus number of reserved sectors [ 393.305548][T13590] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:18 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, 0x0, 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 393.555018][T13609] FAT-fs (loop0): bogus number of reserved sectors [ 393.561552][T13609] FAT-fs (loop0): Can't find a valid FAT filesystem [ 393.575229][T13612] EXT4-fs (loop4): quotafile must be on filesystem root [ 394.342763][T13634] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, 0x0, 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:21 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 396.355519][T13648] EXT4-fs (loop4): quotafile must be on filesystem root [ 396.362835][T13647] FAT-fs (loop0): bogus number of reserved sectors [ 396.377073][T13647] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, 0x0, 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:21 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 396.573035][T13671] FAT-fs (loop0): bogus number of reserved sectors [ 396.582131][T13671] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, &(0x7f0000000000), 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 396.772352][T13681] FAT-fs (loop0): bogus number of reserved sectors [ 396.779105][T13681] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:22 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, &(0x7f0000000000), 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 396.983134][T13692] FAT-fs (loop0): bogus number of reserved sectors [ 397.004790][T13692] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x0, &(0x7f0000000000), 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:24 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 399.469316][T13716] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 399.531859][T13717] FAT-fs (loop0): bogus number of reserved sectors [ 399.541454][T13717] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{0x0}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:24 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 399.677245][T13740] FAT-fs (loop0): bogus number of reserved sectors [ 399.683845][T13740] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:25 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{0x0}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 399.853439][T13752] FAT-fs (loop0): bogus number of reserved sectors [ 399.872461][T13752] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{0x0}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:27 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 402.540752][T13779] FAT-fs (loop0): bogus number of reserved sectors [ 402.553947][T13779] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 402.598230][T13784] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:27 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:28 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 402.745588][T13801] FAT-fs (loop0): bogus number of reserved sectors [ 402.752175][T13801] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 402.894760][T13810] FAT-fs (loop0): bogus number of reserved sectors [ 402.901286][T13810] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:30 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r5 = dup2(r2, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:30 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:30 executing program 1: close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 405.667402][T13839] FAT-fs (loop0): bogus number of reserved sectors [ 405.669944][T13838] EXT4-fs (loop4): quotafile must be on filesystem root [ 405.673938][T13839] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:31 executing program 1: close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 08:05:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:31 executing program 1: close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 405.878423][T13861] FAT-fs (loop0): bogus number of reserved sectors [ 405.895852][T13861] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:31 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:33 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 408.771391][T13894] EXT4-fs (loop4): quotafile must be on filesystem root [ 408.781979][T13895] FAT-fs (loop0): bogus number of reserved sectors [ 408.790984][T13895] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="040000090000000066617400", 0xc}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 409.012055][T13915] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:34 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 409.105990][T13919] FAT-fs (loop0): bogus number of reserved sectors [ 409.112516][T13919] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 08:05:36 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 411.795463][T13950] EXT4-fs (loop4): quotafile must be on filesystem root [ 411.837456][T13953] FAT-fs (loop0): invalid media value (0x00) [ 411.843458][T13953] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 08:05:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 412.022913][T13971] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 412.125245][T13980] FAT-fs (loop0): invalid media value (0x00) [ 412.137883][T13980] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200", 0x12}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 414.832206][T14008] FAT-fs (loop0): invalid media value (0x00) [ 414.842477][T14013] EXT4-fs (loop4): quotafile must be on filesystem root [ 414.844035][T14008] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:40 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 415.071437][T14032] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 415.122121][T14032] 9pnet: Insufficient options for proto=fd [ 415.148758][T14039] FAT-fs (loop0): invalid media value (0x00) [ 415.169800][T14039] FAT-fs (loop0): Can't find a valid FAT filesystem [ 415.249599][T14045] EXT4-fs (loop4): quotafile must be on filesystem root [ 415.282464][T14053] 9pnet: Insufficient options for proto=fd 08:05:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:43 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 417.887791][T14072] FAT-fs (loop0): invalid media value (0x00) [ 417.904861][T14075] EXT4-fs (loop4): quotafile must be on filesystem root [ 417.921216][T14072] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 417.948891][T14075] 9pnet: Insufficient options for proto=fd 08:05:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:43 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400", 0x15}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 418.221465][T14103] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 418.290908][T14103] 9pnet: Insufficient options for proto=fd [ 418.300959][T14102] FAT-fs (loop0): invalid media value (0x00) [ 418.311120][T14102] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:46 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:46 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 421.015628][T14131] EXT4-fs (loop4): quotafile must be on filesystem root 08:05:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 421.094716][T14133] FAT-fs (loop0): count of clusters too big (4294966678) [ 421.095847][T14131] 9pnet: Insufficient options for proto=fd [ 421.102003][T14133] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:46 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) [ 421.276651][T14158] FAT-fs (loop0): count of clusters too big (4294966678) [ 421.278857][T14156] EXT4-fs (loop4): quotafile must be on filesystem root [ 421.283858][T14158] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:46 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) [ 421.337911][T14165] 9pnet: Insufficient options for proto=fd [ 421.455562][T14170] FAT-fs (loop0): count of clusters too big (4294966678) [ 421.471627][T14170] FAT-fs (loop0): Can't find a valid FAT filesystem 08:05:49 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(0xffffffffffffffff, r1) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:49 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x0, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:49 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x0, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) r5 = dup2(r1, 0xffffffffffffffff) setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:52 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x0, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:52 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) dup2(r2, r1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:52 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:52 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) dup2(r2, r1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:52 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) dup2(r2, r1) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000000), 0x4) 08:05:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:55 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, &(0x7f0000000080)) 08:05:55 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x0, &(0x7f0000000000), 0x4) 08:05:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x0) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:55 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x0, &(0x7f0000000000), 0x4) 08:05:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:05:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x0, &(0x7f0000000000), 0x4) 08:05:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:58 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:05:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, 0x0, 0x0) 08:05:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) socket$inet(0xa, 0x801, 0x84) listen(0xffffffffffffffff, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:05:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, 0x0, 0x0) 08:05:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:05:58 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40047211, &(0x7f0000000080)) 08:05:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = memfd_create(&(0x7f00000002c0)='\ve\xae\x12}Z\xafF\xdb\x17\x84?\x1au\x95\xa3\\\xe2\xcb\xf5\xa9\xbes\x03/\xe3\xbba\xab\xc7\xf9\x88\xb3u>\x1e\xc4\xcc\xb4\x01\x9f:\xfe\xf1\x1e\x01B\x9eX\x11\x8b\x8a\xff\nJ\xc9y\x8b\xe3\xce\x80Y\xdc\xeeKCuW\a\x86\xedY\xe4\xde\xf8W\xfe\xe4q\r/>\xd1l#x\x83\x05&\x03Fi\x1a.w\xf9\xe8\x04Kh\xdc\x98\xaf\xb5%HG\f\xc5\xbc\xf2\xf6-\x16\'`\xba\xb3\xcf\xbd\xe9\xeb\x89J*+q\x10\xdc\xfb\xaa\xf4m8B\xa2D\xf9] \x86\xc7\xffg\xa1\xe2\x8c\xa5S\xaa\xfa\x15\x95\x98\x97vV\xd5l\xa6\x01\xf4\x9f\x8c\x16\x9b \xe1\xc9\xe3\x8e\xbd\x18\x8377\xb8\xd5\x0e\x06\xd3\x80\vD\xadE\xadS\x91\xc8q\xa1\v\x12\x83\xf7\xb5\x04\x00\x00\x00\x00\x96\xb0\x92\x7f~\xe9\b\xc9\xd7Z\xf2\x84v\xba\xa9\xe9\x12B\x1cu\b\xf9\x17\xef\xb3*\xe9}3o\x16$5D\xf6\xealH\xde\xb3\x87', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r6 = dup2(r2, r1) setsockopt$llc_int(r6, 0x10c, 0x5, 0x0, 0x0) 08:06:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x0) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 08:06:01 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:01 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) [ 436.519493][T14432] EXT4-fs (loop2): quotafile must be on filesystem root [ 436.598983][T14445] 9pnet: Insufficient options for proto=fd 08:06:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x0) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40047211, 0x0) 08:06:02 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x0) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 436.887392][T14462] 9pnet: Insufficient options for proto=fd 08:06:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 437.087849][T14475] 9pnet: Insufficient options for proto=fd 08:06:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="e89520ad"], 0x60}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 08:06:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:04 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 08:06:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:04 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:04 executing program 2: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002240)=[{&(0x7f00000011c0)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab42402", 0x67}, {0x0, 0x0, 0xffdfffffffff2c9d}], 0x0, 0x0) 08:06:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000580)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, "e096ca8428dee6ccd5061fe38cb3313d1611452588f029bd63bd1f39a2d94813d3b660932da05986cb537ea436116bf4ef165d89a5d24d68a34b6696673c44f913c96914ab1a1ea977db1e8a7aabcd35b61c9902aad3c48d422b4ddd3aa20c77cc583af50aa689feaf6e04f960c7632a2bdea191404b14bcaa21182743fd0a"}}, 0x197) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'wg1\x00', {0x2, 0x4e22, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 08:06:04 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 439.710861][ T3536] XFS (loop2): SB sanity check failed [ 439.722854][ T3536] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x241/0x2b0, xfs_sb block 0xffffffffffffffff [ 439.730327][T14525] 9pnet: Insufficient options for proto=fd [ 439.736908][ T3536] XFS (loop2): Unmount and run xfs_repair [ 439.753293][ T3536] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 439.762236][ T3536] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 439.774265][ T3536] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 439.784025][ T3536] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 439.796068][ T3536] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ 08:06:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 439.806599][ T3536] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 439.815938][ T3536] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 439.825415][ T3536] 00000060: 00 00 03 5a b4 24 02 00 00 00 00 00 00 00 00 00 ...Z.$.......... [ 439.834766][ T3536] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 439.843800][T14511] XFS (loop2): SB validate failed with error -117. [ 439.984209][T14511] XFS (loop2): SB sanity check failed [ 439.989709][T14511] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x241/0x2b0, xfs_sb block 0xffffffffffffffff [ 440.003508][T14511] XFS (loop2): Unmount and run xfs_repair [ 440.038863][T14511] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 440.067680][T14543] 9pnet: Insufficient options for proto=fd [ 440.106950][T14511] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 08:06:05 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, 0x0) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 440.157462][T14511] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 440.201608][T14511] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 440.224444][T14511] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 440.233344][T14511] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 440.250774][T14511] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 440.260147][T14511] 00000060: 00 00 03 5a b4 24 02 00 00 00 00 00 00 00 00 00 ...Z.$.......... [ 440.278148][T14511] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 440.289691][T14511] XFS (loop2): SB validate failed with error -117. [ 440.415665][T14563] 9pnet: Insufficient options for proto=fd 08:06:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, 0x0) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:07 executing program 2: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000002240)=[{&(0x7f00000011c0)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab42402", 0x67}, {0x0, 0x0, 0xffdfffffffff2c9d}], 0x0, 0x0) 08:06:07 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000580)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, "e096ca8428dee6ccd5061fe38cb3313d1611452588f029bd63bd1f39a2d94813d3b660932da05986cb537ea436116bf4ef165d89a5d24d68a34b6696673c44f913c96914ab1a1ea977db1e8a7aabcd35b61c9902aad3c48d422b4ddd3aa20c77cc583af50aa689feaf6e04f960c7632a2bdea191404b14bcaa21182743fd0a"}}, 0x197) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000280)='./bus\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'wg1\x00', {0x2, 0x4e22, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioprio_get$uid(0x3, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) creat(&(0x7f0000000780)='./file0\x00', 0x0) 08:06:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, 0x0) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 442.841874][ T3536] XFS (loop2): SB sanity check failed [ 442.853273][ T3536] XFS (loop2): Metadata corruption detected at xfs_sb_read_verify+0x241/0x2b0, xfs_sb block 0xffffffffffffffff 08:06:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 442.953462][ T3536] XFS (loop2): Unmount and run xfs_repair [ 442.985710][ T3536] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 443.028474][ T3536] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ 08:06:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 443.076361][ T3536] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 08:06:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 443.144411][ T3536] 00000020: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 443.153271][ T3536] 00000030: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ [ 443.234480][ T3536] 00000040: 00 00 00 00 40 00 0d 89 00 00 00 00 00 00 0d 8a ....@........... [ 443.243346][ T3536] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ 08:06:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) [ 443.294499][ T3536] 00000060: 00 00 03 5a b4 24 02 00 00 00 00 00 00 00 00 00 ...Z.$.......... [ 443.303412][ T3536] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 443.376410][T14585] XFS (loop2): SB validate failed with error -117. 08:06:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 443.578528][T14583] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) [ 443.586470][T14583] FAT-fs (loop0): Filesystem has been set read-only 08:06:11 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xa3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x401) 08:06:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:11 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x64b82) r1 = memfd_create(0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000004800)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x81) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) getpeername$packet(r2, &(0x7f00000000c0), 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001a80)="bb5e60dbc287dc84b8c07d052aa9dd677f2963337265", 0x16}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000200000000ffdbdf25010000000c0099000100000000fffffffa00010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r4, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48001) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5756}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfe0f}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x4000001) getpgid(0xffffffffffffffff) 08:06:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)) io_submit(0x0, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) 08:06:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, 0x0) 08:06:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:11 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:11 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:11 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, 0x0) 08:06:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:14 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:14 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, 0x0) 08:06:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:14 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) 08:06:14 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x2004000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:14 executing program 0: keyctl$setperm(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) 08:06:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:17 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) 08:06:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:17 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[0x0]) 08:06:17 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 08:06:17 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:17 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:20 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[0x0]) 08:06:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 08:06:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 08:06:20 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:20 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 08:06:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[0x0]) 08:06:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 08:06:20 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 08:06:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:23 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 08:06:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:23 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:23 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) [ 458.319718][T14945] 9pnet: Insufficient options for proto=fd 08:06:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:23 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) [ 458.587637][T14960] 9pnet: Insufficient options for proto=fd 08:06:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x4) io_setup(0x20, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1e0933b8, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x12f}]) 08:06:26 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) 08:06:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:26 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:26 executing program 2: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) [ 461.327662][T14990] FAT-fs (loop0): bogus number of reserved sectors [ 461.347885][T14990] FAT-fs (loop0): Can't find a valid FAT filesystem [ 461.377398][T14987] 9pnet: Insufficient options for proto=fd 08:06:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000240)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066edc4e179702107c4c271de9d0000000066b808000f01c9660f38806f000f011c2666b8bf008ee0", 0x53}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x1}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 08:06:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:26 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) 08:06:26 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) [ 461.616246][T15018] FAT-fs (loop0): bogus number of reserved sectors [ 461.631249][T15018] FAT-fs (loop0): Can't find a valid FAT filesystem [ 461.645883][T15013] 9pnet: Insufficient options for proto=fd 08:06:29 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}, {@uname={'uname', 0x3d, '&$$#:]#.\\@'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:29 executing program 2: pipe(0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x0) 08:06:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="c7aaaaaabbaa0000000000008100000086dd6d"], 0x0) 08:06:29 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 464.402302][T15061] FAT-fs (loop0): bogus number of reserved sectors [ 464.441453][T15061] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@access_user='access=user'}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 464.468828][T15069] 9pnet: Insufficient options for proto=fd 08:06:29 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:29 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:29 executing program 1: keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000380), 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[], 0x10) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000180)={0x1ff, 0x7, 0x0, 0xffffff7f, 0xf6}) ftruncate(r1, 0x8200) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x634c}}, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) read$FUSE(r0, &(0x7f0000000a00), 0x1000) [ 464.682413][T15093] FAT-fs (loop0): bogus number of reserved sectors [ 464.707108][T15093] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:32 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}, {@debug={'debug', 0x3d, 0x7fffffff}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:32 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080), 0x4) close(r3) 08:06:32 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 467.458401][T15120] FAT-fs (loop0): bogus number of reserved sectors [ 467.467425][T15120] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:32 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)='=', 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfea6) 08:06:32 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}, {@cachetag={'cachetag', 0x3d, '*+'}}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 467.676082][T15149] FAT-fs (loop0): bogus number of reserved sectors [ 467.687696][T15149] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:35 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:35 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sysfs$3(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050400000000000000007e", @ANYRES32], 0x1c}}, 0x0) getpid() creat(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) 08:06:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport='privport'}], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) 08:06:35 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 470.515929][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 08:06:35 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 470.577984][T15182] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 470.601625][T15188] FAT-fs (loop0): bogus number of reserved sectors 08:06:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}, {@obj_type={'obj_type', 0x3d, '%)-'}}]}}) [ 470.630425][T15188] FAT-fs (loop0): Can't find a valid FAT filesystem [ 470.651738][T15200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.664054][T15200] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 08:06:35 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:36 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sysfs$3(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050400000000000000007e", @ANYRES32], 0x1c}}, 0x0) getpid() creat(0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x10) 08:06:36 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:36 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 470.889411][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.908305][T15218] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 470.960914][T15221] FAT-fs (loop0): bogus number of reserved sectors [ 470.967502][T15221] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:38 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:38 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x19, 0x0, &(0x7f0000000100)=0xe1) 08:06:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}, {@fowner_gt={'fowner>'}}]}}) 08:06:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:38 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(0xffffffffffffffff, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:39 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200008500, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000b00)='nfs\x00', 0x0, &(0x7f0000000000)) 08:06:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}, {@fsname={'fsname'}}]}}) [ 473.741842][T15252] FAT-fs (loop0): bogus number of reserved sectors [ 473.775433][T15252] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:39 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) [ 473.885750][T15266] NFS: Device name not specified 08:06:39 executing program 1: 08:06:39 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 474.012783][T15275] FAT-fs (loop0): bogus number of reserved sectors [ 474.019302][T15275] FAT-fs (loop0): Can't find a valid FAT filesystem [ 475.591656][ T0] NOHZ: local_softirq_pending 08 08:06:41 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:41 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}, {@audit='audit'}]}}) 08:06:41 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:41 executing program 1: 08:06:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 476.785622][T15305] FAT-fs (loop0): bogus number of reserved sectors [ 476.792820][T15305] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:42 executing program 1: 08:06:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:42 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:42 executing program 1: 08:06:42 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:42 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>'}}]}}) [ 477.042385][T15328] FAT-fs (loop0): bogus number of reserved sectors [ 477.068131][T15328] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:45 executing program 1: 08:06:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 08:06:45 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:45 executing program 1: 08:06:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {0x0}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 479.954489][T15366] FAT-fs (loop0): bogus number of reserved sectors [ 479.981032][T15366] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:45 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}, {@subj_user={'subj_user', 0x3d, 'ext3\x00'}}]}}) 08:06:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:45 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r2, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10048, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xad80}, 0x0, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="6fbd8d070a0885e0ec3af67905a2e85b8b52e41b76cd93e60b611973ebab4bb19a9695cba0", 0x25}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000e4ff06010eab26e276915a6555010000000000000000020000000c00034000000000000000081c0007800800024000000002f2b402400000000108004260000000020c0003400000000000000008740b0d1565d9ca4b71236e7b8faa5d9da1a1ed919a908fa21562b1cb32bc648196a07b83acde2970165cda674dd4776220f9b09d152805e1cb4837c86632d5890d66ba18cab9f6d1c4e95d8b1e630f94c6a4d73ef1df6f565be3e839c993476a6aba3e0dd5c9790000f976336e2e3d00"/202], 0x48}, 0x1, 0x0, 0x0, 0x40000080}, 0x81) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x81e6a000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e20, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0xfffffffffffffff9, 0xfffffffffffffffe, 0x2}, {0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x40000002, 0x2, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0xa, @in=@broadcast, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 08:06:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {0x0}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 480.369960][T15395] FAT-fs (loop0): bogus number of reserved sectors [ 480.403198][T15395] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = dup(r2) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000040), 0x4) 08:06:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {0x0}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@hash='hash'}]}}) 08:06:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000540)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:48 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:06:48 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x17) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) chown(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 08:06:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 483.053292][T15442] FAT-fs (loop0): bogus number of reserved sectors [ 483.066440][T15442] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:06:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 483.383269][T15464] FAT-fs (loop0): bogus number of reserved sectors [ 483.405371][T15464] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:48 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x4) 08:06:48 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) [ 483.672807][T15479] FAT-fs (loop0): bogus number of reserved sectors [ 483.694231][T15479] FAT-fs (loop0): Can't find a valid FAT filesystem [ 484.075606][ T27] audit: type=1804 audit(1592381209.326:4): pid=15482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/194/bus" dev="sda1" ino=16357 res=1 08:06:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000540)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b", 0x2}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}}}}], 0x28}}], 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 08:06:51 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:51 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x4) 08:06:51 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x20000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept4$unix(r3, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x10048, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xad80}, 0x0, 0x8, 0x3, 0x0, 0x20, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000140)="6fbd8d070a0885e0ec3af67905a2e85b8b52e41b76cd93e60b611973ebab4bb19a9695cba0400e23f6c8", 0x2a}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="480000e4ff06010eab26e276915a6555010000000000000000020000000c00034000000000000000081c0007800800024000000002f2b402400000000108004260000000020c0003400000000000000008740b0d1565d9ca4b71236e7b8faa5d9da1a1ed919a908fa21562b1cb32bc648196a07b83acde2970165cda674dd4776220f9b09d152805e1cb4837c86632d5890d66ba18cab9f6d1c4e95d8b1e630f94c6a4d73ef1df6f565be3e839c993476a6aba3e0dd5c9790000f976336e2e3d00"/202], 0x48}, 0x1, 0x0, 0x0, 0x40000080}, 0x81) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x30, 0xffffffffffffffff, 0x81e6a000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e20, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0xfffffffffffffff9, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x40000002, 0x2, 0x1}, {{@in=@broadcast, 0x0, 0xff}, 0xa, @in=@broadcast, 0x100000, 0x0, 0x0, 0x1, 0x7fffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 486.090927][T15516] FAT-fs (loop0): bogus number of reserved sectors [ 486.097586][T15516] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b", 0x2}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b", 0x2}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 486.287440][T15534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:06:51 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001380)="069b15", 0x3}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 486.390787][T15539] FAT-fs (loop0): invalid media value (0x00) [ 486.411235][T15539] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) [ 486.610997][T15549] FAT-fs (loop0): invalid media value (0x00) [ 486.617145][T15549] FAT-fs (loop0): Can't find a valid FAT filesystem [ 486.656251][ T27] audit: type=1804 audit(1592381211.907:5): pid=15530 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/195/bus" dev="sda1" ino=16363 res=1 08:06:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:54 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001380)="069b15", 0x3}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:54 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000000540)}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:54 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x4) 08:06:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xea60}) 08:06:54 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:54 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001380)="069b15", 0x3}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 489.187283][T15578] FAT-fs (loop0): invalid media value (0x00) [ 489.209783][T15578] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:54 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 08:06:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:54 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:54 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 489.512733][T15606] FAT-fs (loop0): invalid media value (0x00) [ 489.530797][T15606] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r3, 0x0, 0x0, 0x4) [ 489.745514][T15616] FAT-fs (loop0): invalid media value (0x00) [ 489.761434][T15616] FAT-fs (loop0): Can't find a valid FAT filesystem [ 489.869475][ T27] audit: type=1804 audit(1592381215.128:6): pid=15598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/196/bus" dev="sda1" ino=16366 res=1 [ 490.335193][ T27] audit: type=1804 audit(1592381215.588:7): pid=15624 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/207/bus" dev="sda1" ino=16381 res=1 08:06:57 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x94, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:06:57 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:57 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) getpid() r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x4) 08:06:57 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:06:57 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 492.282594][T15640] FAT-fs (loop0): invalid media value (0x00) [ 492.289082][T15640] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:57 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:06:57 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:06:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:06:57 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:06:57 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 492.507532][T15665] FAT-fs (loop0): count of clusters too big (4294966678) [ 492.518425][T15665] FAT-fs (loop0): Can't find a valid FAT filesystem 08:06:57 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 492.749081][ T27] audit: type=1804 audit(1592381218.009:8): pid=15660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/197/bus" dev="sda1" ino=16356 res=1 08:07:00 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:07:00 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x94, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:00 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000, &(0x7f000002f000/0x1000)=nil}) dup3(r2, r4, 0x0) 08:07:00 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:00 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) [ 495.349537][T15701] FAT-fs (loop0): count of clusters too big (4294966678) [ 495.356820][T15701] FAT-fs (loop0): Can't find a valid FAT filesystem 08:07:00 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:00 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:00 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8c", 0x3}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000001c0)={[{@fat=@uid={'uid'}}]}) 08:07:00 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:00 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8c", 0x3}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:00 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) [ 495.610320][T15729] FAT-fs (loop0): count of clusters too big (4294966678) [ 495.625358][T15729] FAT-fs (loop0): Can't find a valid FAT filesystem [ 497.985322][ T0] NOHZ: local_softirq_pending 08 08:07:03 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:03 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x94, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8c", 0x3}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:07:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:03 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce9", 0x4}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:07:03 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce9", 0x4}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:03 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:03 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:06 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xde, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:07:06 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:06 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:06 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce9", 0x4}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x18, 0x0) 08:07:06 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:06 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)) 08:07:06 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:06 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x0) 08:07:06 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:07 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)) 08:07:09 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xde, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:09 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:09 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x0) 08:07:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:09 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000001c0)) 08:07:09 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:10 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:10 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:10 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000000)={0x18}, 0x11) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0x0) 08:07:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 08:07:13 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xde, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddb"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:13 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:13 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 08:07:13 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 08:07:13 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:13 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:13 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) 08:07:13 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:13 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:13 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0) [ 508.106433][T15939] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:07:16 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x103, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:16 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:16 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:07:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:16 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:16 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:16 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:07:16 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:16 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="1eee8ce946", 0x5}, {&(0x7f0000001380)="069b15", 0x3}], 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:07:19 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x103, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:19 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:19 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:19 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:19 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:19 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 516.540576][ T0] NOHZ: local_softirq_pending 08 08:07:22 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:22 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x103, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:22 executing program 2: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x40100}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x1d, 0x4ca, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:07:22 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:22 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:22 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f00000000c0)) 08:07:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:22 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:22 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) [ 517.820309][ T0] NOHZ: local_softirq_pending 08 08:07:25 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f00000000c0)) 08:07:25 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 08:07:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:25 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x116, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:25 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:25 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 08:07:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f00000000c0)) 08:07:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:25 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:25 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:25 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f00000000c0)) 08:07:25 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:25 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:25 executing program 2: fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:28 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x116, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:28 executing program 4: r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:28 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:28 executing program 2: fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:28 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:28 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:28 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:28 executing program 2: fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:28 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:28 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(0xffffffffffffffff, r0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:28 executing program 2: r0 = syz_open_procfs(0x0, 0x0) fstat(r0, &(0x7f00000000c0)) 08:07:31 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x116, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:31 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:31 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:31 executing program 2: r0 = syz_open_procfs(0x0, 0x0) fstat(r0, &(0x7f00000000c0)) 08:07:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:31 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:31 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:31 executing program 2: r0 = syz_open_procfs(0x0, 0x0) fstat(r0, &(0x7f00000000c0)) 08:07:31 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:31 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:31 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:34 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x11f, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:34 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:34 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:34 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:34 executing program 4: epoll_create1(0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r1 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 08:07:34 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(0xffffffffffffffff, &(0x7f00000000c0)) 08:07:34 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:34 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, 0x0) 08:07:34 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4cc, 0x0) 08:07:37 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x11f, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:37 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:37 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 08:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, 0x0) 08:07:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:37 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:37 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:37 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 08:07:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, 0x0) 08:07:37 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup3(r1, r0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 08:07:38 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = dup(r2) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040), 0x4) 08:07:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x11f, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:40 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 08:07:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x83, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/200, 0xc8}, 0x820000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x8001, 0x3}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace(0x10, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000006c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) clone(0x8000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffff9}, 0x1, 0x0, 0x80000000000001}, {{@in=@multicast2, 0x0, 0x3c}, 0xa, @in=@multicast2, 0x100000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) r6 = socket$inet6(0xa, 0xa, 0x13) connect$inet6(r6, 0x0, 0x0) 08:07:40 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x0, 0x0, 0x168, 0x0, 0x250, 0x238, 0x238, 0x250, 0x238, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@ipcomp={{0x30, 'ipcomp\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 08:07:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) 08:07:41 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:41 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, 0x0, 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 535.832890][T16362] xt_CT: No such helper "syz1" [ 535.860343][T16368] xt_CT: No such helper "syz1" 08:07:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 08:07:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x124, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 08:07:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:43 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 08:07:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:43 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 08:07:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:44 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe81, 0x0, &(0x7f0000000580)="feea10e2b28050ef5179e713ae41b4a09e7d36b3e705e990cf6b3338c08a04b89d615918bcbbf3f14236d950b625d8d35097ccf3cc493873796156de5accf588827168eafbf13c26b1226ec8d27092b2e6303e32920d5fb7c84a862366a56b0cb5e95a36f03d838c3a71e069812da922fedce9f1dbc64ce5c6e3cd937a60b1ca3d0b204cd08d75fc56e91173bbd0842fbdb8bd5a0aef02b1189503cdde2ae5b3cc27e1e21a162cd0a080f2a2298adbc85ffb91d557bca8d1d78194fe06c21d756b7febb572376574a77a2f54da0e0f8f0aec4ecb62f99274b0e7fae40b3830cd2934ff36b316bcd225c298e8ab3b1e123d893f945ce48ecde33e2dd1ffac9e53b64aa3546bce9c10f498c29535b2f3d9e9f264d95364c9421da05c77ff04f7b1110d8b88d30765b38dc8cadce5a4b27fbe7481c3d459f51251e2b7f4a41c0601a7b57465d13cab12f6291e62acbd0d7b895ea044236eb328831ddaa92911a073dadf600c78db73c1b6187b8fcb858acb0d4131885b2639e9a3225dfb19591a74c0c51dd057f798852a3b6fdccb8c7b68e1f2208a6c1cb8618d750f0ea6d64c498f17d46f3439a6f64568327ef2dfc34b9775f53c6e1f5b6255e8c7f605668fbc442e7cebfe8a564ea176a3e6a24503fe7247512be13f84c027e9c81fc69df946b90a3f6850a18bae15acc8926420be1600ca06c332ea8e8334474ebc4df0541b11426eef7c229f0f5566fb4c45968a8be1bef1aa78412daf5ee78ab7a8d269961a3b4f9b9f0265123f4556204583df55aa8f84abc14e52a53b668407c13565407681c8639e170cb11109f9f8064c7b305258bae2a01f4a83a62fd3829e87900b659a4153c4745e04a16b3088eaddb23ff110934812626c432cea513b19d03e282d6759ee444f177b207c731421f22c6a0c8db8ea19906a12e68119c9a8c015feda4add1c7ba8426983fb3ee27e3989327acd4a677d93f06e40cb8b98235deb7835f1ace57af1ac95d336524924ae898d992e1f58b24b701c326e0a1d465410400a939321b8573cdaaa385d83f04bccb6fe776549575352a444187aa6bd4ad38b3de1ad20d95fba2e0326e9784728b8b317a318c5ab24f37791ea64010f620cf60bcd7464e2ddb6d42a8e3b65c5b76173836907b195327615fa392a625975500889aac638c27e207768d44e3042e047a2c9b61525482de5eff03fdaf8a5a49f327bf6ac25b13c303e1c68c50834926079feca7394b88eb77ba5fee3308de28fc34d7c98664f7716fa0cf7c736e0cc4ffc9cae2b2d473a61685ed871183028f4d41f81f28927c5a2603c05e4c587b63b9e5d7b8e018a2ed1c6875ea467f41fac6312dad9c343f055a787bb5a571ead29f9b96779070bb3db50b730326ba23e234952b7fe764f4bd09b58a14bd5aac2bcf2332b1d003d71b9c950ba46045a3d945cced3e79982fd49970c76966c8580966a00331e1c4034c10f17cb1deeded6e5fde1938f1750017395ed34d0074712617e3d5cf855a3679eddbef2ae0202befe1b7ec2d1585221e08cc2c2cc8f82188c50d38f6df822500154beb6919b2097fc59e537a69247e83d3a55eb8c208f303081f06da12467deec8e26a61f6ddb9d287ab54e6513971da0f6c1fc1f28b36c373a52d1285ab4a11d516090fe886b460cc57e6412ca4554eb737258d17764ac59472cda6493a9714948900f87834d18c2a1389ecf5375e8337332b8e68f45a65f9e74a622eb25af348191d8f774275cd556611355be56232ffccc2a44535ecfa930d70aa21806ba5db71d716bf495bfc0973c104799a880db3cc58f9cc53de3700e29183a642d726c8962980fbaca71f9cc5bac18980dedc994466914419c67637f2b01eb4262c11ea503f752175b58526b12d17eb1ade04149151b769e4dcf75fc93e30b29aba4c524a43c688ad956a3ca3281b04658dc7f057ba82ed9c4d84a13fcfefd51b73b5fce25baec9b839b263c4f64d183021db3161c620ce5253d11abe3bcfffb460e339b30eb5e799e0374c1e4180aebd8d5198526aec04068b2e9d57c94895af72a43dcb34c51761b04ded43dd8ff15cfd9b065b15518bc15ad91c16cac3387e12c63d97215e87371d469ac1b0d0c72623caa4078580ed840765972048c409df8b88c8ed43d42757b52a3c9b1ca94c9dda91b99bc0137f3aad15e1d12ca11d1c87a46629b6af691e5ea4783e902db7d55821af345bcef2d68f36bb233d5b4244ce93d81c478d5b77fc0b1b6362a783b8d335c76474fcdfcd9184a85972fd1bc2266a992035c1fd0dbe22b43cf7a7d8e27f43cd19b3ba9ee0a70c1a4fd509df17b19ec96d098960dafaad52ca78c154e532bd04d02f6c134ade51a649947ba75eaa1fa7109cb640ea42358906db515511c269af55dfd7ae1922a54475152112c3cda29d83cb84ae1d7650bce0c2227d143346599c7406de0a74c85cf42defd67f4bc68d60cd1c3f45a3e28470fd2c0cba4822325d5923e9be0a80fbc7e4367c114808d0ad176e1791e4c3cd7d7175785f1e42cfee6a5b4a621d499d0a3155d3d3b27f2aba94484840b6c7397bce11e86b9fbed791a81f93b374488bb290bed012d8903abcb3c31168a3e4accc588930b477ce50aab09cb338629f089c1d9427ff5eaeb7ae8b24362bc9aaf8796dec9793cfda36e21a0225cb44bf0545b09deaa01937e9e69aaf57360033c1d5115e9abde45ad3200e5da33751329012e93ce770f71d0d445540d1d8c00512c3517f968552cea108d7f69b1de1920ec7479dfc0f6e14b3f32c687543835f487c801996909bcdfa5806b910eb9227808cd0a74de0ca2028a54b4dbf17cce88d53314620085a7d2853918b7e9316ce90c040ecd06d9d81d5410340bdc9f546af3d5882f40962e05b4b992b74a2c0722b86b61714eb034c0e04b371cd0aa00a9d7a9a32b2d17ec8ca401c1009a329d2edf44f068ffb31dd45f8e03f56b10a1f0a3c9367e503dd7ca7c04da15718de3b04f5906258cc4d40bb947ee7e47862af2a25355a320281083a77c1fa6ed331bb7c151a7af91f383603ed918310746fbcfda573787332d1b87c35b58d85d67cbb66ff2063a36941cc672abd59c5af327ca602ba6ce5bab6ce818231251e735d686e85c06d31bceffbeed6dac4f45940a5cf066f10806b532b3e67adbb492c4f9daf2d866f31483f653b03e177841b88f4f2095e258c709dcef058016e989d69632221cee894ca17f19db509d275b0c8afc57c11960ea2d74cd7b518b159d06f39cbb46e6b56b1ac006416c03738eaf38d62fdb9232b48316ce8820b918c31d30cfebb6a60a20e980c39975c4b55bd85ae53db105bb0d82d742aaf2cc9ed5141f5d6ee731f793d0cbe19bf3e55433bec9ba8866b18b1670f0d2f15ffc94a01c20fa96b8b093de471bbc2cec00a4b15aa6b274a26f2e688de1fc7ac0d254694bceb7f8e64439b4bd31c753008c6f639bb1987cf8861281b27a26727c76082383e4b08b396e25c44696e6d0cb66740e82e45d1cc625801019726ee08e8f090391855fb8f9459c099a34d11d91704e149500162c08c111d25a31285395184aed54e2917db3645a6739dab034598e33758927c367391656df788b90a65aba4f06752d7670d1a1da57cc78b3ff41d9df4dd3fb7a65bcdf50be28f96587acfd122db12840a3394f713f5786a0223dfbaa9491a60503ff18a78fc7bb05fcb22cade7c7c267e94c7e0b95e59f2b53defda83d297e1332f716718ec1d6809b2daa2f803be08226e9d8ff3c4b31d11e297bcd3fa0c6f7a339e3ddabcbd4bfbdeeed9bd74f8886f7640b6fe28662418b7db53d640b3c71802e6495778b87adcb2d16fdfc474c00f2821d12d656bd336e60fabe8f4d768603e0dd8e4ed5c93e62f07154a8293aa6afc375b7749379b047f8bf964fff605fb6f08179c92521f82c766aceb6e04c70093242f8a6ee20a4d32832733e141f43bd2382bf05d321f2d346aa76694c0f101f6d0d3125df3779fd52aaffe310d11ddd62d9a790897f5f2ddbf56ba447aeed53cbaff3d4b47ba9a49e253ecbbd0048d68591167b1b468b21382685812ac3c822f18964480fe1975699da88ba71c41a2803ac693909b31a7ddef39baf31c6395919ac828b4ec717ec9ea139dfb8110f5db81c8c83521ab9f1d7423feb706fb2ad4a4403c62b8e6e3482a448743134c637fc2019f1b9c80c33571c8a528468ab59b126f765436d23a0b18149bbc501d467a30e3483c728af936bf59bdbaf480c3eb374bbd66991f62a639423af4fdcae491ff2de445590f4711a4c29e21eb65945fb2a3536faec74f9b8e5ce6a6778c8688f44c4ab201592204a3155f623c5aa7c2b4947069bbaf1bd3abbb9f84daa2cd645ee1e4a974d18078d5cae90686f8a1722fee242c45a9df19e290a01a45ddaf514dc824d05ddce3fbde91293ad4e7dfc3adff84f55cc7be4af6c9b0fa8ee2b02384869ddd4a087f210e9e0fde8e834ebc9dd0435b2bdb35b56be416faaac2bf5386a6baa85b44fc4eab0ceea07f9b548ad295be409f33cf6ed81d6d1917673b2c5f1d4cb82308b2061308b0f36991e12b608b6ff91e51cea310059b4d0989ba26f23b4b83bc309514be102849b4828bd3fa34a80b59846d90e39343ba1a6ec4522911f87ab284fe417ff6c7238d5d313548fd465a6971b712658b1341f903787a991a1c1bea8b7a20fb5e215b6686b4a86a21b1a685484f21b09c0a36ca9c88b59ba971ccfda1de12f8f63e232f35af04cfd62b1c4489510c724abadf1c7267b989bc70763bc86135c6cdfea4d14660c370d82706ea9b1f671302727b2f00ba17ffae5cc7148a0c28f26d5e81fb90d99106a6e48154d9eda9d0fccf0cf05c597c4716e8db512eb8e51c262881d98fff6a52c3e1f252f58edea287c8beb4fd03ad9c3a5762b9414751d720301955a98653b2a3ae4ad1a8624faeaebfdd451c121bf1f41c0b2ab63fadeccaf8b7a09f1b54ff2ae028053b0a7f284c0ba96aba5e0d9cc269d9a6e8a1e1b4e24a5ab5354378a26584a16195cd28960739ea7ff0cd0346e808e2db3ca728eb1aa359dcae9e9ada1f6e52fe24969235871a7168bcf0e58bb26e24318e7efe7b6e46fec78e87cff159100adc6058176523eb3bfe03d7ae22b41b841b8b9af5df006ca644a0c22a5ced1c2f4d8b63ff82ad64763167df651fcb8a38601c9fc27c7264bed5c6d37eac60080876206db7d491e23924b8f5387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 08:07:47 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x124, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cd00006ed3d09a79a1eadb03bcf9da64d58d296175037958e271b60dedf8937f02008b5e5a076d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a09000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fcc3dc3dec04b25dfc17975238345d4f71af35910b158c36657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb17c7beba3da8223fe5308e4e65eebaace04f4087c4f0da0d9a88f9dbb593ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b6b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2453dcb6a2bfd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab9261503def363fb099408885afc2bf9a4f8c35070669ea69f5e4be1b8e0d6697e98186fc51439d670dba6623279f73db9dec75070cd9ab0fd96b069ef6d2857b6bf955012cf7fe50d133d541da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cad4ead13484742506da2c8067ab743c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10241f43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a082776eb0937523f5292d126599d4345cde64f903c3415c618a32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a442863d6e257cfa4ce50f3d163d442824414a7da26cc86d7e18631c2061b1c8a8e3c06837fe08de62f8710ca977960a72b85eace73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76b3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09ea4770b4278fa14547d8ce3c21188e5e4e2baacd98e8e443d6aaafe80053636ed1d99346c2468dd952595d78e9583bf4ea5de36099e3cddcb23aefd124b0ab85580f4ebb6eddb9e87c9ece874be869b3abe1c6ea55887dfa18d0aea13625895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e49d21836e4b3220616aafbe7a3a18375ae593eb58fd500426286d8713b2509c19e83ed472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b6a7651004132c6e0898374c644eea45de7867a0efbad0ab2bc33b350440a90b79134e42da4e030916d86a7c2e1b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b29996e5cefbc9f857bc1332d29c42ffa701624d73b7000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000980)="b9ff0300600d698cff9e14f008004de7f9c764362ae28e79667717032de9bda08b79", 0x0, 0xfc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 08:07:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:47 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) 08:07:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002840)=[{{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 08:07:47 executing program 1: unshare(0x40000000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0) 08:07:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:47 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) listen(r0, 0x0) 08:07:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) [ 542.053846][T16465] IPVS: ftp: loaded support on port[0] = 21 [ 542.130356][T16465] IPVS: ftp: loaded support on port[0] = 21 08:07:47 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) [ 542.467742][ T335] tipc: TX() has been purged, node left! [ 543.864294][ T335] tipc: TX() has been purged, node left! 08:07:50 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x124, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:50 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x62}, {0x9a, 0x400, 0x9, 0x0, 0x0, 0xce, 0xffff}, {0x8, 0x180000000000}, 0x5, 0x6e6bbd, 0x0, 0x1}, {{@in6=@empty}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x0, 0xa68, 0x4e20, 0x0, 0x2, 0xa0, 0x20}, {0x6df8, 0x3, 0x0, 0x1, 0x0, 0x945b, 0x8, 0x20}, {0x4, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x0, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e21, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x20}, {0x3f, 0x0, 0xba, 0x0, 0x20, 0x3}, {0x1, 0x0, 0x3, 0x1}, 0x0, 0x6e6bc0}, {{@in6=@private0={0xfc, 0x0, [], 0x1}}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, 0xa4734e9}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private}, {0x0, 0x0, 0xc91a}, {}, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in=@local}}, 0xe8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:07:50 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/768], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x110b, 0x2, &(0x7f0000000540)="8d14fb003092bd81ed4e5b534c5747c8", 0x0, 0x1000}, 0x28) 08:07:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:50 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 08:07:50 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe81, 0xac, &(0x7f0000000580)="feea10e2b28050ef5179e713ae41b4a09e7d36b3e705e990cf6b3338c08a04b89d615918bcbbf3f14236d950b625d8d35097ccf3cc493873796156de5accf588827168eafbf13c26b1226ec8d27092b2e6303e32920d5fb7c84a862366a56b0cb5e95a36f03d838c3a71e069812da922fedce9f1dbc64ce5c6e3cd937a60b1ca3d0b204cd08d75fc56e91173bbd0842fbdb8bd5a0aef02b1189503cdde2ae5b3cc27e1e21a162cd0a080f2a2298adbc85ffb91d557bca8d1d78194fe06c21d756b7febb572376574a77a2f54da0e0f8f0aec4ecb62f99274b0e7fae40b3830cd2934ff36b316bcd225c298e8ab3b1e123d893f945ce48ecde33e2dd1ffac9e53b64aa3546bce9c10f498c29535b2f3d9e9f264d95364c9421da05c77ff04f7b1110d8b88d30765b38dc8cadce5a4b27fbe7481c3d459f51251e2b7f4a41c0601a7b57465d13cab12f6291e62acbd0d7b895ea044236eb328831ddaa92911a073dadf600c78db73c1b6187b8fcb858acb0d4131885b2639e9a3225dfb19591a74c0c51dd057f798852a3b6fdccb8c7b68e1f2208a6c1cb8618d750f0ea6d64c498f17d46f3439a6f64568327ef2dfc34b9775f53c6e1f5b6255e8c7f605668fbc442e7cebfe8a564ea176a3e6a24503fe7247512be13f84c027e9c81fc69df946b90a3f6850a18bae15acc8926420be1600ca06c332ea8e8334474ebc4df0541b11426eef7c229f0f5566fb4c45968a8be1bef1aa78412daf5ee78ab7a8d269961a3b4f9b9f0265123f4556204583df55aa8f84abc14e52a53b668407c13565407681c8639e170cb11109f9f8064c7b305258bae2a01f4a83a62fd3829e87900b659a4153c4745e04a16b3088eaddb23ff110934812626c432cea513b19d03e282d6759ee444f177b207c731421f22c6a0c8db8ea19906a12e68119c9a8c015feda4add1c7ba8426983fb3ee27e3989327acd4a677d93f06e40cb8b98235deb7835f1ace57af1ac95d336524924ae898d992e1f58b24b701c326e0a1d465410400a939321b8573cdaaa385d83f04bccb6fe776549575352a444187aa6bd4ad38b3de1ad20d95fba2e0326e9784728b8b317a318c5ab24f37791ea64010f620cf60bcd7464e2ddb6d42a8e3b65c5b76173836907b195327615fa392a625975500889aac638c27e207768d44e3042e047a2c9b61525482de5eff03fdaf8a5a49f327bf6ac25b13c303e1c68c50834926079feca7394b88eb77ba5fee3308de28fc34d7c98664f7716fa0cf7c736e0cc4ffc9cae2b2d473a61685ed871183028f4d41f81f28927c5a2603c05e4c587b63b9e5d7b8e018a2ed1c6875ea467f41fac6312dad9c343f055a787bb5a571ead29f9b96779070bb3db50b730326ba23e234952b7fe764f4bd09b58a14bd5aac2bcf2332b1d003d71b9c950ba46045a3d945cced3e79982fd49970c76966c8580966a00331e1c4034c10f17cb1deeded6e5fde1938f1750017395ed34d0074712617e3d5cf855a3679eddbef2ae0202befe1b7ec2d1585221e08cc2c2cc8f82188c50d38f6df822500154beb6919b2097fc59e537a69247e83d3a55eb8c208f303081f06da12467deec8e26a61f6ddb9d287ab54e6513971da0f6c1fc1f28b36c373a52d1285ab4a11d516090fe886b460cc57e6412ca4554eb737258d17764ac59472cda6493a9714948900f87834d18c2a1389ecf5375e8337332b8e68f45a65f9e74a622eb25af348191d8f774275cd556611355be56232ffccc2a44535ecfa930d70aa21806ba5db71d716bf495bfc0973c104799a880db3cc58f9cc53de3700e29183a642d726c8962980fbaca71f9cc5bac18980dedc994466914419c67637f2b01eb4262c11ea503f752175b58526b12d17eb1ade04149151b769e4dcf75fc93e30b29aba4c524a43c688ad956a3ca3281b04658dc7f057ba82ed9c4d84a13fcfefd51b73b5fce25baec9b839b263c4f64d183021db3161c620ce5253d11abe3bcfffb460e339b30eb5e799e0374c1e4180aebd8d5198526aec04068b2e9d57c94895af72a43dcb34c51761b04ded43dd8ff15cfd9b065b15518bc15ad91c16cac3387e12c63d97215e87371d469ac1b0d0c72623caa4078580ed840765972048c409df8b88c8ed43d42757b52a3c9b1ca94c9dda91b99bc0137f3aad15e1d12ca11d1c87a46629b6af691e5ea4783e902db7d55821af345bcef2d68f36bb233d5b4244ce93d81c478d5b77fc0b1b6362a783b8d335c76474fcdfcd9184a85972fd1bc2266a992035c1fd0dbe22b43cf7a7d8e27f43cd19b3ba9ee0a70c1a4fd509df17b19ec96d098960dafaad52ca78c154e532bd04d02f6c134ade51a649947ba75eaa1fa7109cb640ea42358906db515511c269af55dfd7ae1922a54475152112c3cda29d83cb84ae1d7650bce0c2227d143346599c7406de0a74c85cf42defd67f4bc68d60cd1c3f45a3e28470fd2c0cba4822325d5923e9be0a80fbc7e4367c114808d0ad176e1791e4c3cd7d7175785f1e42cfee6a5b4a621d499d0a3155d3d3b27f2aba94484840b6c7397bce11e86b9fbed791a81f93b374488bb290bed012d8903abcb3c31168a3e4accc588930b477ce50aab09cb338629f089c1d9427ff5eaeb7ae8b24362bc9aaf8796dec9793cfda36e21a0225cb44bf0545b09deaa01937e9e69aaf57360033c1d5115e9abde45ad3200e5da33751329012e93ce770f71d0d445540d1d8c00512c3517f968552cea108d7f69b1de1920ec7479dfc0f6e14b3f32c687543835f487c801996909bcdfa5806b910eb9227808cd0a74de0ca2028a54b4dbf17cce88d53314620085a7d2853918b7e9316ce90c040ecd06d9d81d5410340bdc9f546af3d5882f40962e05b4b992b74a2c0722b86b61714eb034c0e04b371cd0aa00a9d7a9a32b2d17ec8ca401c1009a329d2edf44f068ffb31dd45f8e03f56b10a1f0a3c9367e503dd7ca7c04da15718de3b04f5906258cc4d40bb947ee7e47862af2a25355a320281083a77c1fa6ed331bb7c151a7af91f383603ed918310746fbcfda573787332d1b87c35b58d85d67cbb66ff2063a36941cc672abd59c5af327ca602ba6ce5bab6ce818231251e735d686e85c06d31bceffbeed6dac4f45940a5cf066f10806b532b3e67adbb492c4f9daf2d866f31483f653b03e177841b88f4f2095e258c709dcef058016e989d69632221cee894ca17f19db509d275b0c8afc57c11960ea2d74cd7b518b159d06f39cbb46e6b56b1ac006416c03738eaf38d62fdb9232b48316ce8820b918c31d30cfebb6a60a20e980c39975c4b55bd85ae53db105bb0d82d742aaf2cc9ed5141f5d6ee731f793d0cbe19bf3e55433bec9ba8866b18b1670f0d2f15ffc94a01c20fa96b8b093de471bbc2cec00a4b15aa6b274a26f2e688de1fc7ac0d254694bceb7f8e64439b4bd31c753008c6f639bb1987cf8861281b27a26727c76082383e4b08b396e25c44696e6d0cb66740e82e45d1cc625801019726ee08e8f090391855fb8f9459c099a34d11d91704e149500162c08c111d25a31285395184aed54e2917db3645a6739dab034598e33758927c367391656df788b90a65aba4f06752d7670d1a1da57cc78b3ff41d9df4dd3fb7a65bcdf50be28f96587acfd122db12840a3394f713f5786a0223dfbaa9491a60503ff18a78fc7bb05fcb22cade7c7c267e94c7e0b95e59f2b53defda83d297e1332f716718ec1d6809b2daa2f803be08226e9d8ff3c4b31d11e297bcd3fa0c6f7a339e3ddabcbd4bfbdeeed9bd74f8886f7640b6fe28662418b7db53d640b3c71802e6495778b87adcb2d16fdfc474c00f2821d12d656bd336e60fabe8f4d768603e0dd8e4ed5c93e62f07154a8293aa6afc375b7749379b047f8bf964fff605fb6f08179c92521f82c766aceb6e04c70093242f8a6ee20a4d32832733e141f43bd2382bf05d321f2d346aa76694c0f101f6d0d3125df3779fd52aaffe310d11ddd62d9a790897f5f2ddbf56ba447aeed53cbaff3d4b47ba9a49e253ecbbd0048d68591167b1b468b21382685812ac3c822f18964480fe1975699da88ba71c41a2803ac693909b31a7ddef39baf31c6395919ac828b4ec717ec9ea139dfb8110f5db81c8c83521ab9f1d7423feb706fb2ad4a4403c62b8e6e3482a448743134c637fc2019f1b9c80c33571c8a528468ab59b126f765436d23a0b18149bbc501d467a30e3483c728af936bf59bdbaf480c3eb374bbd66991f62a639423af4fdcae491ff2de445590f4711a4c29e21eb65945fb2a3536faec74f9b8e5ce6a6778c8688f44c4ab201592204a3155f623c5aa7c2b4947069bbaf1bd3abbb9f84daa2cd645ee1e4a974d18078d5cae90686f8a1722fee242c45a9df19e290a01a45ddaf514dc824d05ddce3fbde91293ad4e7dfc3adff84f55cc7be4af6c9b0fa8ee2b02384869ddd4a087f210e9e0fde8e834ebc9dd0435b2bdb35b56be416faaac2bf5386a6baa85b44fc4eab0ceea07f9b548ad295be409f33cf6ed81d6d1917673b2c5f1d4cb82308b2061308b0f36991e12b608b6ff91e51cea310059b4d0989ba26f23b4b83bc309514be102849b4828bd3fa34a80b59846d90e39343ba1a6ec4522911f87ab284fe417ff6c7238d5d313548fd465a6971b712658b1341f903787a991a1c1bea8b7a20fb5e215b6686b4a86a21b1a685484f21b09c0a36ca9c88b59ba971ccfda1de12f8f63e232f35af04cfd62b1c4489510c724abadf1c7267b989bc70763bc86135c6cdfea4d14660c370d82706ea9b1f671302727b2f00ba17ffae5cc7148a0c28f26d5e81fb90d99106a6e48154d9eda9d0fccf0cf05c597c4716e8db512eb8e51c262881d98fff6a52c3e1f252f58edea287c8beb4fd03ad9c3a5762b9414751d720301955a98653b2a3ae4ad1a8624faeaebfdd451c121bf1f41c0b2ab63fadeccaf8b7a09f1b54ff2ae028053b0a7f284c0ba96aba5e0d9cc269d9a6e8a1e1b4e24a5ab5354378a26584a16195cd28960739ea7ff0cd0346e808e2db3ca728eb1aa359dcae9e9ada1f6e52fe24969235871a7168bcf0e58bb26e24318e7efe7b6e46fec78e87cff159100adc6058176523eb3bfe03d7ae22b41b841b8b9af5df006ca644a0c22a5ced1c2f4d8b63ff82ad64763167df651fcb8a38601c9fc27c7264bed5c6d37eac60080876206db7d491e23924b8f5387", &(0x7f0000000200)=""/172, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 08:07:50 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:50 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:07:50 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) 08:07:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x126, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:53 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x62}, {0x9a, 0x400, 0x9, 0x0, 0x0, 0xce, 0xffff}, {0x8, 0x180000000000}, 0x5, 0x6e6bbd, 0x0, 0x1}, {{@in6=@empty}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x0, 0xa68, 0x4e20, 0x0, 0x2, 0xa0, 0x20}, {0x6df8, 0x3, 0x0, 0x1, 0x0, 0x945b, 0x8, 0x20}, {0x4, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x0, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e21, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x20}, {0x3f, 0x0, 0xba, 0x0, 0x20, 0x3}, {0x1, 0x0, 0x3, 0x1}, 0x0, 0x6e6bc0}, {{@in6=@private0={0xfc, 0x0, [], 0x1}}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, 0xa4734e9}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private}, {0x0, 0x0, 0xc91a}, {}, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in=@local}}, 0xe8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:07:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:53 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:53 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 08:07:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f00000004c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:07:53 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:53 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)) 08:07:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:53 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 08:07:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x126, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 08:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40801) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 08:07:56 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x80}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20, 0x62}, {0x9a, 0x400, 0x9, 0x0, 0x0, 0xce, 0xffff}, {0x8, 0x180000000000}, 0x5, 0x6e6bbd, 0x0, 0x1}, {{@in6=@empty}, 0xa, @in=@remote, 0x0, 0x0, 0x1, 0x32, 0xac, 0x3}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@local, 0x0, 0xa68, 0x4e20, 0x0, 0x2, 0xa0, 0x20}, {0x6df8, 0x3, 0x0, 0x1, 0x0, 0x945b, 0x8, 0x20}, {0x4, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x4d3}, 0x2, @in6=@local, 0x0, 0x4, 0x3, 0x0, 0x1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010101, @in=@multicast1, 0x4e21, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x20}, {0x3f, 0x0, 0xba, 0x0, 0x20, 0x3}, {0x1, 0x0, 0x3, 0x1}, 0x0, 0x6e6bc0}, {{@in6=@private0={0xfc, 0x0, [], 0x1}}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, 0xa4734e9}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in=@private}, {0x0, 0x0, 0xc91a}, {}, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in=@local}}, 0xe8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:07:56 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 08:07:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 08:07:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) 08:07:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40801) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getpid() bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 08:07:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) 08:07:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20001732, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) 08:07:56 executing program 2: prctl$PR_SET_MM(0x23, 0xf, &(0x7f000063b000/0x3000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, r1) munmap(&(0x7f00007ff000/0x3000)=nil, 0x3000) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x103f00, 0x8001) 08:07:59 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x126, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:07:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) 08:07:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000300)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 08:07:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0124fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 08:07:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:07:59 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 554.155564][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.187555][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.247478][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.275409][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 08:07:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 554.299856][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.331002][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 08:07:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 554.346398][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.368054][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.432743][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 [ 554.470875][T16687] batman_adv: batadv0: adding TT local entry ba:0e:72:00:ff:ff to non-existent VLAN 1280 08:07:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:07:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000300)) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 08:07:59 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x541e, 0x73b000) 08:08:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:02 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x127, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x3231564e}}) 08:08:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80dc5521, 0x0) 08:08:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:02 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:02 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:08:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) 08:08:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc0405519, &(0x7f0000000000)) 08:08:02 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x0) 08:08:02 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x2000000) 08:08:02 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 559.422182][ T0] NOHZ: local_softirq_pending 08 08:08:05 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x127, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x4b47, 0x0) 08:08:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x2000000) 08:08:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:08:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:05 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:08:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x2000000) 08:08:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:05 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) 08:08:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 560.684194][T16833] FAT-fs (loop4): bogus number of reserved sectors [ 560.690858][T16833] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x127, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:08 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x24000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000003c0)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) 08:08:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}) 08:08:08 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @void, @eth={@random="9f96d700", @random="120064935d71", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @multicast1}}}}}}, 0x26) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 08:08:08 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @dev, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 563.420560][T16857] FAT-fs (loop4): bogus number of reserved sectors [ 563.427280][T16857] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:08 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)) 08:08:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:08 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:08 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)) 08:08:08 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000000)) 08:08:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x81785501, &(0x7f0000000000)) [ 563.633845][T16880] FAT-fs (loop4): bogus number of reserved sectors [ 563.661673][T16880] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000002c0)={@loopback, 0x4b}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYBLOB="ec"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x0, 0x0, 0x0) 08:08:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 563.837408][T16902] FAT-fs (loop4): bogus number of reserved sectors [ 563.844229][T16902] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108030f80ecdb4cb92e0a480e0a10000000e3bd6efb254c09000e00030040fefeff050005001201", 0x2e}], 0x1}, 0x0) [ 564.372674][T16923] @þþÿ: renamed from team0 [ 564.412906][T16923] 8021q: adding VLAN 0 to HW filter on device @þþÿ 08:08:09 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:09 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @vbi={0x0, 0x0, 0x32315659}}) [ 564.512510][T16929] FAT-fs (loop4): bogus number of reserved sectors [ 564.525803][T16929] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 564.682857][T16939] FAT-fs (loop4): bogus number of reserved sectors [ 564.689497][T16939] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:11 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x9, 0x0, 0x0) 08:08:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3f, &(0x7f0000000140)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f27d0076cc03592a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:12 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:08:12 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 566.670440][T16962] FAT-fs (loop4): bogus number of reserved sectors [ 566.677002][T16962] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:12 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) [ 566.828568][T16982] FAT-fs (loop4): bogus number of reserved sectors [ 566.835449][T16982] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:14 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:14 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:14 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:14 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 08:08:14 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x7f00, 0x4) 08:08:15 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 569.706394][T17008] FAT-fs (loop4): bogus number of reserved sectors [ 569.725073][T17008] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:15 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:15 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 569.930613][T17027] FAT-fs (loop4): bogus number of reserved sectors [ 569.947420][T17027] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:15 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 570.182050][T17038] FAT-fs (loop4): bogus number of reserved sectors [ 570.193449][T17038] FAT-fs (loop4): Can't find a valid FAT filesystem [ 570.462125][ T27] audit: type=1800 audit(1592381295.735:9): pid=17019 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=15853 res=0 08:08:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @nl=@unspec, @ethernet={0x0, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92304f242b416ae9eeefc0e9c60ebab1c176bf9bb4dde984510c82dc2b9381b72b100d0682fd0a0c4ac106b29e220dc28dac72599456d4c4e6f3fe2d1dee18f638ac947b5e026a3287c84ccc72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb398dff1db3df9858837458a4ca037605000000b6be484e4c9507af216bd8ed42f7dd5adb8e49f4a94615e49c08c9a20819e02cc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa2285b6e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e9cfa9d9e57033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400000000000000ff8dc4006200607a9a76e5d9656a7154c75773902a1bdf399df337762ddcda5aa5c0925130312d095e9c1f973d091c198c1a11edb695cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864487367d6d7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6fca7844f9dab530388eb1f43d4abbfc59d6d1b18fe380df4bf024f120bd715d82033f2fb7d8fc9e0d77b294e097e293db58992c0024ab2fd8e5e7fb178f047ba32548b4d32972cba6f49051cec1bf6f16231bbb90a2d201e5a47811a2278a03bf7700b06fa191ebd3a0c2ef0058ffebd7ccde2480ae40d6156edc4ef81f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f81074192c48c63384f52b8eeb70571e5bbb3e6d2b5eba51aee6f48968981811f832d064048c0e0bbe46984f1f0d0504255c22ee8674053d0e160e525536edf56a93d0a7a6f0889f4ee8964875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875858e083144c642f71cdc8e5634c1200c056430f677ee7ed7ac1f9743786b2fb8d0fcfcc3d36c93230b7b059bc295aa0e38b1c3edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd0c84892c97c80987e5c7954e9f3694d116b01ce0b8ef953de70e7ce0311c8b018956f8a42ca26ab295f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f798c7f520078fee48f83b5989543729e36a9e1d686bc86cd51704f309130f5347413776a7b7bea3c46c0c4c4b7c27c45057d95ac85ac1cdcee8e6fa31fc02137ed1fb4b21c13b9a2c5e3f7c9ef9c45a314a6f0b9352be92986d63263b1aa5264cb4a82cf080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561d34e4e9851e81d4a355abf43d917c16a2bb0cfb284fcfde901576954ef59e4a658ca431be123b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb463c407f87dafd6199f9ddd1f62da58ca7d3297d6a1bfc5a9aa38a05e70591d5cdab1c268ef3c1984c7c51566cfc2ab6e6fbc99ec206a54fb49056a555414178ef00d8b800009f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8ad62edc65828fbb6e279f745d2872f0c08635e465ca443a6a64c7803760880af23fb3f438a5d11fffc96dd1cb951642f1433f65b4e170a62a5f7a8d0f9d5cef0d17289c43d4aee2127f7a343899434594cc23e1c864164e130754b337e520f285dc670a31241bfb43ac62fc7f985586168483427072a535f2cac81ec261c8af540b020163483fbae3f4f5239339aeb9a445b47f26abcf7c6cb28c68c6448f5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x7000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf086dd1fffffff0e003300630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) [ 572.802876][T17068] FAT-fs (loop4): bogus number of reserved sectors [ 572.814000][T17068] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 572.923787][T17061] kvm: emulating exchange as write 08:08:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x12d203) 08:08:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000240)={0x7, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 573.081258][T17083] FAT-fs (loop4): bogus number of reserved sectors [ 573.125679][T17083] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}}) 08:08:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 08:08:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @nl=@unspec, @ethernet={0x0, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 08:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f22d8f30fbcf80f3581d90c0066f2ba5f57160fc77c01", 0x37}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, @vsock={0x28, 0x0, 0x0, @host}, @nl=@unspec, @ethernet={0x0, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='team_slave_0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:08:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 575.895139][T17126] FAT-fs (loop4): bogus number of reserved sectors [ 575.920994][T17126] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) 08:08:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x0, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 576.229611][T17147] FAT-fs (loop4): bogus number of reserved sectors [ 576.273433][T17147] FAT-fs (loop4): Can't find a valid FAT filesystem [ 577.968718][ T0] NOHZ: local_softirq_pending 08 08:08:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x0, 0x10, [0x0, 0x0, 0x0, 0x0]}) 08:08:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:24 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:24 executing program 1: 08:08:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 08:08:24 executing program 1: 08:08:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x0, 0x10, [0x0, 0x0, 0x0, 0x0]}) [ 578.900963][T17176] FAT-fs (loop4): bogus number of reserved sectors [ 578.926300][T17176] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:24 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 08:08:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="040000090000000066617400", 0xc}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x4, 0xb}, 0x40) 08:08:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 579.162297][T17195] FAT-fs (loop4): bogus number of reserved sectors [ 579.177747][T17195] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:27 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r1, 0x4, 0x40400) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0x18) 08:08:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:27 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:27 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) [ 581.970919][ T27] audit: type=1804 audit(1592381307.247:10): pid=17225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/284/bus" dev="sda1" ino=15918 res=1 [ 582.007370][T17228] FAT-fs (loop4): invalid media value (0x00) [ 582.026010][ T27] audit: type=1804 audit(1592381307.277:11): pid=17225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/284/bus" dev="sda1" ino=15918 res=1 [ 582.055418][T17228] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) 08:08:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 582.074487][ T27] audit: type=1804 audit(1592381307.297:12): pid=17225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/284/bus" dev="sda1" ino=15918 res=1 [ 582.098630][ T27] audit: type=1804 audit(1592381307.317:13): pid=17225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/284/bus" dev="sda1" ino=15918 res=1 08:08:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a0001"], 0x68}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) [ 582.312091][T17248] FAT-fs (loop4): invalid media value (0x00) [ 582.323866][T17248] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:27 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:30 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:30 executing program 1: 08:08:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:30 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000ac0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmsg$rds(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 08:08:30 executing program 1: 08:08:30 executing program 5: 08:08:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) [ 585.090949][T17284] FAT-fs (loop4): invalid media value (0x00) [ 585.112824][T17284] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) [ 585.311666][T17300] FAT-fs (loop4): invalid media value (0x00) [ 585.320929][T17300] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:33 executing program 1: 08:08:33 executing program 5: 08:08:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:33 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:33 executing program 1: 08:08:33 executing program 5: 08:08:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) [ 588.221748][T17328] FAT-fs (loop4): invalid media value (0x00) [ 588.261700][T17328] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:33 executing program 5: 08:08:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x7, 0xc, [0x0, 0x0, 0x0]}) 08:08:33 executing program 1: 08:08:33 executing program 5: [ 588.568917][T17348] FAT-fs (loop4): invalid media value (0x00) [ 588.575032][T17348] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:36 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:36 executing program 2: 08:08:36 executing program 1: 08:08:36 executing program 5: 08:08:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:36 executing program 2: 08:08:36 executing program 1: 08:08:36 executing program 5: [ 591.281504][T17368] FAT-fs (loop4): count of clusters too big (4294966678) [ 591.300829][T17368] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:36 executing program 2: 08:08:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:36 executing program 5: [ 591.512615][T17383] FAT-fs (loop4): count of clusters too big (4294966678) [ 591.522179][T17383] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:39 executing program 2: 08:08:39 executing program 1: 08:08:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000000c0)={[{@fat=@fmask={'fmask'}}]}) 08:08:39 executing program 5: 08:08:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:39 executing program 5: 08:08:39 executing program 2: 08:08:39 executing program 1: [ 594.361762][T17404] FAT-fs (loop4): count of clusters too big (4294966678) [ 594.382477][T17404] FAT-fs (loop4): Can't find a valid FAT filesystem 08:08:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:08:39 executing program 5: 08:08:39 executing program 2: 08:08:39 executing program 1: 08:08:39 executing program 2: 08:08:39 executing program 5: 08:08:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:08:42 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:42 executing program 1: 08:08:42 executing program 5: 08:08:42 executing program 2: 08:08:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) 08:08:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:42 executing program 5: 08:08:42 executing program 2: 08:08:42 executing program 1: 08:08:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)) 08:08:42 executing program 2: 08:08:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/42, 0x2a}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/240, 0xf0}, {&(0x7f0000001dc0)=""/165, 0xa5}, {&(0x7f0000001e80)=""/20, 0x14}, {&(0x7f0000001ec0)=""/33, 0x21}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x9}}], 0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506"], 0x14}}, 0x0) 08:08:45 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)) 08:08:45 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) lseek(r0, 0x0, 0x3) 08:08:45 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc912}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) getpid() sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x60}, 0x0) r0 = getpid() ptrace$setsig(0x4203, r0, 0x9440, &(0x7f0000000100)={0x2a, 0xc}) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f00000005c0)={0x0, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x200017}, &(0x7f0000000380)=""/240, 0xf0, &(0x7f0000000480)=""/199, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4400000010000104f7da00"/20, @ANYRES32=0x0, @ANYBLOB="03c5000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYRES32=r3, @ANYBLOB="b9437c4b5d81093bc0fe60fbd7607a6ecebaabfe13e65ab65533c9bd4b1d517b1127bc02b501aedbdc988fa94710ff9e216c3cd8cfb139fface6b01a5133893ea7b825bb69537e23354e3bb503eb303c706f584c88a9bf74b905db10dce1aadd50de7b53a573e3f69b3efd6bd9d16297204139a35aa18d125306e8e4ab1b8bda9099622dcc7844a667da909fb801a06af58154b130cc2aa208ca721b190b566f927cc10a9e0931e4ea0ab726e0c829e8508ee3a8804be31d02f632a3a8ab9b0b5fd34de72ae967b00d40f716a8edef3c0e1be8c984eaedd5802461db26ae625130ab292b8c592405f57ef024deb9d16439aed7db53357ab88a817cf1a2f8ac83b8cf356911d53cd3984cdf3533eb497a4fe52084d29e5412ffb1504d520c3252e60d8d9b2dab1b1a07c0b033b61886fbf386aff3d34cde71d7157acb94a6ec5ce5a765a30067898f28847afc93fe0326990e2659c3495a669a03ad84261350538a904432c373c34d6bba4c4116a385470d2b10fddbf929e1b536c5a7e9afc81997799fd5a6dcc52ef71fe0e0bef9a9c64dbc0aeb8c8f9308c43d3111e758f31f262ef47f51616eaec9104c57d3448657e6a21e211af167435c063dc75dabc5db48ef64804c626867af089cfddb173f9796ca81b3d155e09d222f012480ec09c1b6f1735824090b18fd7fdba751860465f2f435b8adaad6d829d7"], 0x44}}, 0x0) 08:08:45 executing program 5: clone(0x10408100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xfe)\xdd\x8f\x98\xe8\xbe\x16\xc5-\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddp>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5P\xd3\xfd\x81\xac\xa9[.\xab\x92\v\x80\xec\x8f\xbb\xa5\x93Y\xda:\x8d\xd8\x10\x8a\xd8\xee\xb9\x14\x9e|(\xc7\xeaP\xeb?J\xd4\xef\x18n\xec\xf7-T\n\x826m-\xa4\r\xe9\xf5\xf6\xbc*\xe2\x8c\x00\x10\xb6J\xdf\xc3L7\xcd\x15\x9a\xf4\x8f\v\xc4\xf8\x02@y\xdd.H\xa28\xfbR\xc8\xc42\x1d\xda\xe9\xe5\xf5;\x92<\x8eE\xdb\xa0\x1c\xd5\xf2\xca\xbe\x15\a\xc7\x92p>-t\x80y\xb7\xd7\x90\xc5\xb1\x8aH|\xe8\x02\x04\xe1\xe4iy\x95\x85I\xc7\xc8\xbf^\xce\x87\xc8\xdd\xae=.\xb3W\x88\x1c\xb4X\xb8}!\x02L\xedNNtY\x0e\xf1\xe0\xf7mc\x1c^\xe5\xb6\xb3\x1d\xc9\xb0\x8dR/\x8f\xcc\\\xe3\x0e/\x9e%\xd7/\xd5\xc9\x1e&&\x1eX*\xe2B\xbc\x81\xc8\xa4\xf4\x06\x03Y\x12\x12O\xbe\n\xa6\x1b\x1e\xb7$\x8a\xf5ja3\xc1\xa6\xda\xa7\x9dS\x1aB\x87>c\x81\a*$r\x8f\xd6\b[/\\\x96\xf1\x1c\xe3z\xb5\xc2Uv\x9b\x18\x87\xc5;m)4\xcf\xf6U\xfa\xdav\x9a\xbc\xa0>\\\x80\xe3\n\x05\x05z\xef\x03\xa5\xd4\xecJB`\xf3\x99\xef\xf8\x81\xd7\xf5\xb1\x1f\xc1\xb7\x13\xf7B\xed\x8a\xdeT(', 0x0) ftruncate(r0, 0x1000000) finit_module(r0, 0x0, 0x0) 08:08:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 600.576617][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 08:08:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000000c0)) 08:08:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x107042, 0x0) ftruncate(r1, 0x2008002) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0x200069) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200069) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) [ 601.034494][ T27] audit: type=1800 audit(1592381326.310:14): pid=17517 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16017 res=0 08:08:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 08:08:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x206080, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xe00) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x42671, 0x0, 0x0) [ 601.378844][T17529] overlayfs: './file0' not a directory 08:08:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:46 executing program 5: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x5c03, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x0, {0x33a}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) readv(0xffffffffffffffff, &(0x7f0000002980)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000002880)=""/234, 0xea}], 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fffb) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf}, 0xf) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 601.712424][T17539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.778050][T17541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.781022][ T27] audit: type=1800 audit(1592381328.060:15): pid=17521 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16017 res=0 08:08:48 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="f7f249b9740c9e57f43d26a7000000008a58480aa400fd3b79f22a160500000032a5b60a00008024c30e478947d190ac029d02d11f18d4a703f404ba08f9f2f03f76a9936e7600d82ce0756f27e79f790001060000ea3adf4f6684d1d4c326e37121f98cfc1b0cd1130f9cb6ff82a979d05fcd268b70bfbbfa28a8df72c60ea31dc8f36050dddb1c92ce9157a2700fc4db3dd5f476a48b84e468899d6eda06e182d4e89781efaee4c12e6653df9fc21d81c3d1d339db50a945da619d8ab49f6cdc4e7a474c3eb1fb006906230b2394576dec4e7a30888bc1d82d5e407ddba6f0a424599f7c8351057c57eb57a78496e49a580000000000000000c775063dfedaea92f75ad8cf9897eea8ee431075a1af4dc4011632db709607c43dce6f269de812630a2a4e7e3ee4"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) 08:08:48 executing program 5: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x5c03, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x0, {0x33a}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) readv(0xffffffffffffffff, &(0x7f0000002980)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/201, 0xc9}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000002880)=""/234, 0xea}], 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10fffb) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf}, 0xf) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 08:08:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x206080, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0xe00) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x0, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x42671, 0x0, 0x0) 08:08:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x107042, 0x0) ftruncate(r1, 0x2008002) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0x200069) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200069) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) 08:08:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400cd4dd607efd3fc00000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x170}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) [ 603.679392][ T27] audit: type=1800 audit(1592381328.960:16): pid=17562 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16006 res=0 [ 603.712839][T17566] xt_CT: You must specify a L4 protocol and not use inversions on it 08:08:49 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc912}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) getpid() sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x60}, 0x0) r0 = getpid() ptrace$setsig(0x4203, r0, 0x9440, &(0x7f0000000100)={0x2a, 0xc}) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) clone3(&(0x7f00000005c0)={0x0, &(0x7f0000000300)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x200017}, &(0x7f0000000380)=""/240, 0xf0, &(0x7f0000000480)=""/199, 0x0}, 0x58) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xcc4f0100, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="4400000010000104f7da00"/20, @ANYRES32=0x0, @ANYBLOB="03c5000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="b9437c4b5d81093bc0fe60fbd7607a6ecebaabfe13e65ab65533c9bd4b1d517b1127bc02b501aedbdc988fa94710ff9e216c3cd8cfb139fface6b01a5133893ea7b825bb69537e23354e3bb503eb303c706f584c88a9bf74b905db10dce1aadd50de7b53a573e3f69b3efd6bd9d16297204139a35aa18d125306e8e4ab1b8bda9099622dcc7844a667da909fb801a06af58154b130cc2aa208ca721b190b566f927cc10a9e0931e4ea0ab726e0c829e8508ee3a8804be31d02f632a3a8ab9b0b5fd34de72ae967b00d40f716a8edef3c0e1be8c984eaedd5802461db26ae625130ab292b8c592405f57ef024deb9d16439aed7db53357ab88a817cf1a2f8ac83b8cf356911d53cd3984cdf3533eb497a4fe52084d29e5412ffb1504d520c3252e60d8d9b2dab1b1a07c0b033b61886fbf386aff3d34cde71d7157acb94a6ec5ce5a765a30067898f28847afc93fe0326990e2659c3495a669a03ad84261350538a904432c373c34d6bba4c4116a385470d2b10fddbf929e1b536c5a7e9afc81997799fd5a6dcc52ef71fe0e0bef9a9c64dbc0aeb8c8f9308c43d3111e758f31f262ef47f51616eaec9104c57d3448657e6a21e211af167435c063dc75dabc5db48ef64804c626867af089cfddb173f9796ca81b3d155e09d222f012480ec09c1b6f1735824090b18fd7fdba751860465f2f435b8adaad6d829d76d757b1cd7c94705c3aab4c2ec0ed7872848ed46452f7575a35868165cd39759ef396ed5d8f3ec73f6fc2d28a5deba3d37939b"], 0x44}}, 0x0) [ 603.830555][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 08:08:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000ff"], 0x18}}], 0x1, 0x0) [ 603.878041][T17577] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. 08:08:49 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x3803000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x420, 0x44, 0x98, 0x0, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x6020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, '\x00', 'vcan0\x00'}, 0x0, 0x1c8, 0x2f0, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], @ipv6=@loopback}, {@ipv4=@empty, [], @ipv6=@remote}, {@ipv6=@mcast2, [], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@ipv6=@ipv4={[], [], @dev}, [], @ipv6=@remote}], 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_device_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) [ 603.992158][T17583] device ip6gretap0 entered promiscuous mode [ 604.014493][T17583] device macvtap1 entered promiscuous mode [ 604.032942][T17583] device ip6gretap0 left promiscuous mode 08:08:49 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf1, 0xb6, 0xdf, 0x8, 0x86a, 0x2, 0x67c5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x1, 0x3c, 0x2b, 0xac, 0x0, [], [{{0x9, 0x5, 0x8c, 0xa}}]}}]}}]}}, 0x0) 08:08:49 executing program 5: mkdir(0x0, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002540)=""/4108, 0x100c}], 0x1) r2 = socket(0x10, 0x80002, 0x0) io_submit(r1, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) [ 604.434190][ T3536] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 604.535003][ T3536] usb 5-1: Using ep0 maxpacket: 8 [ 604.654918][ T3536] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 604.662946][ T3536] usb 5-1: config 0 has no interface number 0 [ 604.689061][ T3536] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 604.732767][ T3536] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 604.742982][ T3536] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 604.754944][ T3536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.763864][ T3536] usb 5-1: config 0 descriptor?? [ 604.808988][ T3536] usb 5-1: invalid MIDI out EP 0 [ 604.813979][ T3536] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 605.008775][ T9883] usb 5-1: USB disconnect, device number 2 [ 605.784005][ T9883] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 605.914881][ T9883] usb 5-1: Using ep0 maxpacket: 8 [ 606.034662][ T9883] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 606.042720][ T9883] usb 5-1: config 0 has no interface number 0 [ 606.049713][ T9883] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 606.060049][ T9883] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 606.070259][ T9883] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 606.079754][ T9883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.090721][ T9883] usb 5-1: config 0 descriptor?? [ 606.149364][ T9883] usb 5-1: invalid MIDI out EP 0 [ 606.154595][ T9883] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 606.353997][ T3536] usb 5-1: USB disconnect, device number 3 08:08:51 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:51 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x3803000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x420, 0x44, 0x98, 0x0, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x6020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, '\x00', 'vcan0\x00'}, 0x0, 0x1c8, 0x2f0, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], @ipv6=@loopback}, {@ipv4=@empty, [], @ipv6=@remote}, {@ipv6=@mcast2, [], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, {@ipv6=@ipv4={[], [], @dev}, [], @ipv6=@remote}], 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_device_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 08:08:51 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x40000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @broadcast}}) 08:08:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000002340)=""/4099, 0x1003}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000000680)=""/33, 0x21}], 0x5}, 0x24b}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400e7ffc618e5ee2200873a0a8b7ed790d87f5531189207"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:08:51 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x254, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00~'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:08:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x1f3) sendfile(r1, r2, 0x0, 0x1c542) [ 606.724466][T17645] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 606.752423][T17652] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 606.771116][T17652] IPVS: ftp: loaded support on port[0] = 21 [ 606.831718][ T27] audit: type=1804 audit(1592381332.111:17): pid=17660 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir098530491/syzkaller.L3OenC/180/file0/file0" dev="loop5" ino=29 res=1 [ 606.885444][T17677] IPVS: ftp: loaded support on port[0] = 21 [ 606.895432][T17660] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 970771) [ 606.927071][T17660] FAT-fs (loop5): Filesystem has been set read-only 08:08:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x1f3) sendfile(r1, r2, 0x0, 0x1c542) [ 607.101000][ T9883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 607.109574][ T27] audit: type=1804 audit(1592381332.391:18): pid=17690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir098530491/syzkaller.L3OenC/181/file0" dev="sda1" ino=16081 res=1 [ 607.191001][T17652] IPVS: ftp: loaded support on port[0] = 21 08:08:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={r2, 0x0, 0x8, 0x0, 0x0}, 0x20) [ 607.244628][T12518] tipc: TX() has been purged, node left! 08:08:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000002340)=""/4099, 0x1003}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000000680)=""/33, 0x21}], 0x5}, 0x24b}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400e7ffc618e5ee2200873a0a8b7ed790d87f5531189207"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:08:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x0, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) [ 607.376549][ T9883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.398348][ T9883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.442276][T17724] IPVS: ftp: loaded support on port[0] = 21 [ 607.483770][ T9883] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 607.492875][ T9883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.594419][T17740] IPVS: ftp: loaded support on port[0] = 21 08:08:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 607.776175][ T9883] usb 5-1: config 0 descriptor?? [ 608.254362][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.267118][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.274289][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.281151][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.288079][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.294987][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.302092][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.309006][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.315959][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.322891][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.343651][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.350549][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.373660][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.380536][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.403632][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.410502][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.433635][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.440507][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.483622][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.490513][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.516288][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.523165][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.534115][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.541048][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.547945][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.554849][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.561707][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.583647][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.590601][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.613619][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.620575][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.628422][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.635341][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.642204][ T9883] apple 0003:05AC:0254.0001: unknown main item tag 0x0 [ 608.651460][ T9883] apple 0003:05AC:0254.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 608.695130][ T9883] usb 5-1: USB disconnect, device number 4 [ 609.243520][T17800] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 609.383475][T12518] tipc: TX() has been purged, node left! [ 609.494552][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.505461][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.516210][T17800] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 609.525681][T17800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.534690][T17800] usb 5-1: config 0 descriptor?? [ 609.546589][T12518] tipc: TX() has been purged, node left! 08:08:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x0, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:08:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 609.703419][T12518] tipc: TX() has been purged, node left! 08:08:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={r2, 0x0, 0x6, 0x0, 0x0}, 0x20) 08:08:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x1f7) sendfile(r1, r2, 0x0, 0x1c542) [ 609.844095][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 609.850989][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 609.870453][ T27] audit: type=1804 audit(1592381335.151:19): pid=17817 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir643760674/syzkaller.KupmCk/303/file0/file0" dev="loop1" ino=34 res=1 [ 609.944215][T17823] IPVS: ftp: loaded support on port[0] = 21 [ 609.946400][T17817] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 609.989024][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 609.995983][T17817] FAT-fs (loop1): Filesystem has been set read-only [ 610.009337][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.021193][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.029689][T17817] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) 08:08:55 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x254, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00~'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:08:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x51d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4}}]}, 0x2c}}, 0x0) [ 610.038308][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.045507][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.052615][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.060152][T17817] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 970771) [ 610.079866][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.090489][T17817] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 970771) [ 610.110093][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.138781][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.182298][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 08:08:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)="a43030ce8337b2e0c0b1e44c4e00eca6454966bf982a424f5804240902388cf857530625935ac5bf83c0878ba42cd2129e72a2457b4a2137d036ee5e0d37725fe576f121e85a87b35d451c6774c97c5d7d073383e0d4de4489fe88c42ab87fbea02f73ebd6f629959a5a6aba64d4572ac39401def461f827a284b89a9e8f021af97a5048ec41b554a7", 0x89}, {0x0}], 0x2, 0xd) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)="62bdc8c9fac0d3bcb88248f9f8f8e87edc5637656d7a7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f2a64b5b1fbf10f4bc51e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77d0a8d3bcda45483c1fb1194c56ddfddb54e4427ae3c3fc4e3ca8d942584b345a99e4b15", 0x92, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 610.222525][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 08:08:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 610.275290][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.317914][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.345837][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.358664][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.372261][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.389040][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.403780][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 08:08:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 610.418397][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.428059][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.444293][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.460240][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.478292][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.497604][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.506628][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.514742][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.522169][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.531420][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.545227][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.560086][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 08:08:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 610.574830][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.582237][T17800] apple 0003:05AC:0254.0002: unknown main item tag 0x0 [ 610.603654][T17800] apple 0003:05AC:0254.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 610.628852][T17800] usb 5-1: USB disconnect, device number 5 [ 611.003389][T17800] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 611.223966][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.237665][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.248993][T17800] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 611.261225][T17800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.271393][T17800] usb 5-1: config 0 descriptor?? [ 611.773772][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.780645][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.803512][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.810563][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.827210][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.840746][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.854767][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.861779][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.876522][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.892759][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.907244][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.918835][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.933072][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.947975][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.959782][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.973857][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 611.980896][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.001151][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.019052][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.031288][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.045626][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.052719][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.069198][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.086385][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.098125][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.112132][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.126766][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.138648][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.152714][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.166461][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.178232][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.192015][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.206600][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.218634][T17800] apple 0003:05AC:0254.0003: unknown main item tag 0x0 [ 612.233266][T17800] apple 0003:05AC:0254.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 612.519145][T17800] usb 5-1: USB disconnect, device number 6 08:08:58 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 08:08:58 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x0, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:08:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x700, 0x0, &(0x7f0000ca6000)={&(0x7f0000000340)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 08:08:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={r2, 0x0, 0x13, 0x0, 0x0}, 0x20) 08:08:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x254, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00~'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:08:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) 08:08:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 613.587791][T17935] IPVS: ftp: loaded support on port[0] = 21 08:08:59 executing program 1: r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0xff}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x2, 0x0) close(r3) close(r0) [ 613.762901][T17800] usb 5-1: new high-speed USB device number 7 using dummy_hcd 08:08:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:08:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x0, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) [ 614.002933][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.026040][T17800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.063615][T17800] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 614.079440][T17800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.096865][T17800] usb 5-1: config 0 descriptor?? [ 614.209521][T18005] IPVS: ftp: loaded support on port[0] = 21 [ 614.593530][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.600479][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.624625][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.631757][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.702794][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.709686][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.738485][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.750399][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.763105][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.769977][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.787183][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.799287][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.806511][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.813594][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.826295][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.838844][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.851146][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.858363][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.865476][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.872337][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.879460][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.886618][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.893816][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.900711][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.907867][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.915117][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.922019][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.929263][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.936477][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.943642][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.950543][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.957712][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.964827][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.971722][T17800] apple 0003:05AC:0254.0004: unknown main item tag 0x0 [ 614.979362][T17800] apple 0003:05AC:0254.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0254] on usb-dummy_hcd.4-1/input0 [ 614.995425][T17800] usb 5-1: USB disconnect, device number 7 [ 615.282718][T12518] tipc: TX() has been purged, node left! [ 615.452695][T12518] tipc: TX() has been purged, node left! 08:09:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 08:09:01 executing program 1: mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x10100c3, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x1105105cb08) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfffffeff000) 08:09:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:09:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000002340)=""/4099, 0x1003}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000000680)=""/33, 0x21}], 0x5}, 0x24b}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400e7ffc618e5ee2200873a0a8b7ed790d87f5531189207"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:09:01 executing program 5: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045515, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x8}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) 08:09:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x11, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000340)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 08:09:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 616.248421][T18061] IPVS: ftp: loaded support on port[0] = 21 08:09:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000002340)=""/4099, 0x1003}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000000680)=""/33, 0x21}], 0x5}, 0x24b}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0b000c0007000a0001000400060005009084000009000100727376700000000054080200500805000404030000000000090000000000000048000000f87b00000700000000800000ffff000006000000090000000200000006000000a70700007f0000000100ffff09000000406e0000f7ffffff020000004000000009000000c5000000ffff000001010000fd05000000040000590800000500000000000000ff7f0000b01300000500000008000000020000000800000001000000ffffffff06000000ab000000050000000001000006000000080000003f000000ffffff7fff070000000800004f9a000006479f6d08000000050000000600000000000002040000000000000062000000f7000000200000000500000000080000fffffffff0030000fdffffff06000000030000000700000000fcffff0000000009000000d8000000020000008000000000000000030000000300000009000000a0000000dae4000004000000060000000800000080ff03000300000007000000070000000400000000080000030000000200000009000000cad000000000000000000000f00f000003000000080000000600000000020000d50a000000f0ffff08000000ff010000000100007f000000040000000b000000b2070000000200008e01000000020000b50000000100000002000000ffffffff0900000001000000ff7f000000000000030000000200000007000000ff0f00003f000000010000000000010001040000fbffffff0500000000800300ffffff7f3c0300004000000002000000000200000002000000080000000000000100000008000000000000000600000001000000430000000600000066040000080000000500000007000000f802000000000000000000000500000000000080000200000300000072c000000000008000800000010000800000008000000000010000800100000009000000ffff0000470000000300000000000000dba000000100000005000000060000000300000004000000030000000200000001000000070000000100000000000000020000000900000007b400000002000002000000ff000000001000000600000008000000ffffffff7f00000081000000ff0f0000fcffffff008000000004000003b400000300000006000000ff0000000900000003000000ff000000090000001f000000060000000900000005000000ffff000081000000ff070000090000004d00000000000000070000000000000000000000e0ffffff80fffffff1000000c0d40000e9080000cc9a0000060000003f000000ff00000002000000fcffffff0008000004000000010000000b47000009aa78000000fcffffff7fffffff080000000300000005000000ff01000009000000fd0000000900000005000000feffffffe6f5ffff0000000005000000090000008100000008000000040000000600000000000200ba00000006000000ff0300000404020000000000050000000400000005000000000001000400000001000100470c00000000000009000000060000008100000007000000030000000800000000100000d200000005000000010000005b0f0000ffff0000000400000500000001000000090000000100000007000000ffff000004000000f60e000009000000000000000100008006000000ffff0000030000000300000005000000890c0000010000804d000000ffffff7f070000000010000005000000010000800600000004000000c0ffffff04000000be9b1a5d040000000100010000000000002e3601050000000400000000000000f8ffffff02000000810000000600000003000000ff0f0000a384000060060000d71e000000100000ff01000004000000740000000000000208000000fffffeff080000000700000005000000050000000800000001000000c03f000002000000ff00000004000000050000001d0a0000220c00000900000006000000ff0000000500000009000000050000000600000000000100350000000400000000000000050000001f0000000900000008000000960000000900000004000000040000000400000008000000ff010000010000002000000006000000bfe60000000000000300000000020000010100000700000001040000020000000800000009000000bc51000006000000ddebffff06000000a0db0000ff000000620000000800000007000000000000003d00000006000000200000000700000005000000f700000006000000ff070000d2040000ffffffff06000000070000004505000005000000ff07000040000000080000008000000007000000080000004af4000001000000018000001f0000000104000003000000230900000200000009000000070000000600000009000000bc0000000100000045000000740b00000500000008000000fd6c0000ff07000083a00000000000800200000008000000000000000180000002000000040000000101000020000000ffffff7f000001001800000000000000040000000200000001000100020000003e000000040000000600000000000000030000000000000088000000decf00001c0074320000000001ffffffae06000000000000ff0f00000100000008000000ff03000000020000e5d900000600000000080000b45500000600000008000000040000001f000000020000009fcd495502000000f7ffffff6b0a00006b5d075dac000000030000001200000006000000000800000900000004000000c309000009000000eeffffffffff000066000000400000000500000004000000040000000004000002000000070000006905000008000000080000001f0000003e280000fcffffffff010000ffffff7f00000000020000000100000001010000080000001ca100000100000008000500d94d00003c0001000300000000000020010000001f000000050000001300030005000080010000001f02090002006963060000000900000007000000020000004e94b300cadf26bc5f34840a89ab7162c293d9d36cf9aaaf47"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400e7ffc618e5ee2200873a0a8b7ed790d87f5531189207"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) 08:09:01 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='usrjquota=']) 08:09:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:09:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5c6558df5c9ba2a8430a1803068482d9eed2f7a091be260051256b26d66fe7846b81b675474340c1437d6b490a7d113b6ed00a587e8033c14214b81ddd4df6bbe9bd9edebae31277172f4a7158d0077035ddc81cadd24270f872dd22f93fe94354e60deaaa84cb0665206f55078633f282fb2386e35434990ff9b5a5d7de34f0238b327a42211f2b894bab8bf7ee2cf33b9435ba723c13716c5fece206f75c0ad73fdea84f84bdf00dbaa9c283bc0fb6b01e2e47b3ed7ad365e8295e6fd58c16"], 0x0) sendfile(r4, r8, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080fffffffe) 08:09:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8, 0xe7, 0x0, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/202, 0xca}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000002340)=""/4099, 0x1003}, {&(0x7f0000001800)=""/9, 0x9}, {&(0x7f0000000680)=""/33, 0x21}], 0x5}, 0x24b}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$getown(r1, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0b000c0007000a0001000400060005009084000009000100727376700000000054080200500805000404030000000000090000000000000048000000f87b00000700000000800000ffff000006000000090000000200000006000000a70700007f0000000100ffff09000000406e0000f7ffffff020000004000000009000000c5000000ffff000001010000fd05000000040000590800000500000000000000ff7f0000b01300000500000008000000020000000800000001000000ffffffff06000000ab000000050000000001000006000000080000003f000000ffffff7fff070000000800004f9a000006479f6d08000000050000000600000000000002040000000000000062000000f7000000200000000500000000080000fffffffff0030000fdffffff06000000030000000700000000fcffff0000000009000000d8000000020000008000000000000000030000000300000009000000a0000000dae4000004000000060000000800000080ff03000300000007000000070000000400000000080000030000000200000009000000cad000000000000000000000f00f000003000000080000000600000000020000d50a000000f0ffff08000000ff010000000100007f000000040000000b000000b2070000000200008e01000000020000b50000000100000002000000ffffffff0900000001000000ff7f000000000000030000000200000007000000ff0f00003f000000010000000000010001040000fbffffff0500000000800300ffffff7f3c0300004000000002000000000200000002000000080000000000000100000008000000000000000600000001000000430000000600000066040000080000000500000007000000f802000000000000000000000500000000000080000200000300000072c000000000008000800000010000800000008000000000010000800100000009000000ffff0000470000000300000000000000dba000000100000005000000060000000300000004000000030000000200000001000000070000000100000000000000020000000900000007b400000002000002000000ff000000001000000600000008000000ffffffff7f00000081000000ff0f0000fcffffff008000000004000003b400000300000006000000ff0000000900000003000000ff000000090000001f000000060000000900000005000000ffff000081000000ff070000090000004d00000000000000070000000000000000000000e0ffffff80fffffff1000000c0d40000e9080000cc9a0000060000003f000000ff00000002000000fcffffff0008000004000000010000000b47000009aa78000000fcffffff7fffffff080000000300000005000000ff01000009000000fd0000000900000005000000feffffffe6f5ffff0000000005000000090000008100000008000000040000000600000000000200ba00000006000000ff0300000404020000000000050000000400000005000000000001000400000001000100470c00000000000009000000060000008100000007000000030000000800000000100000d200000005000000010000005b0f0000ffff0000000400000500000001000000090000000100000007000000ffff000004000000f60e000009000000000000000100008006000000ffff0000030000000300000005000000890c0000010000804d000000ffffff7f070000000010000005000000010000800600000004000000c0ffffff04000000be9b1a5d040000000100010000000000002e3601050000000400000000000000f8ffffff02000000810000000600000003000000ff0f0000a384000060060000d71e000000100000ff01000004000000740000000000000208000000fffffeff080000000700000005000000050000000800000001000000c03f000002000000ff00000004000000050000001d0a0000220c00000900000006000000ff0000000500000009000000050000000600000000000100350000000400000000000000050000001f0000000900000008000000960000000900000004000000040000000400000008000000ff010000010000002000000006000000bfe60000000000000300000000020000010100000700000001040000020000000800000009000000bc51000006000000ddebffff06000000a0db0000ff000000620000000800000007000000000000003d00000006000000200000000700000005000000f700000006000000ff070000d2040000ffffffff06000000070000004505000005000000ff07000040000000080000008000000007000000080000004af4000001000000018000001f0000000104000003000000230900000200000009000000070000000600000009000000bc0000000100000045000000740b00000500000008000000fd6c0000ff07000083a00000000000800200000008000000000000000180000002000000040000000101000020000000ffffff7f000001001800000000000000040000000200000001000100020000003e000000040000000600000000000000030000000000000088000000decf00001c0074320000000001ffffffae06000000000000ff0f00000100000008000000ff03000000020000e5d900000600000000080000b45500000600000008000000040000001f000000020000009fcd495502000000f7ffffff6b0a00006b5d075dac000000030000001200000006000000000800000900000004000000c309000009000000eeffffffffff000066000000400000000500000004000000040000000004000002000000070000006905000008000000080000001f0000003e280000fcffffffff010000ffffff7f00000000020000000100000001010000080000001ca100000100000008000500d94d00003c0001000300000000000020010000001f000000050000001300030005000080010000001f02090002006963060000000900000007000000020000004e94b300cadf26bc5f34840a89ab7162c293d9d36cf9aaaf47713346842a4fab87"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400e7ffc618e5ee2200873a0a8b7ed790d87f5531189207"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x1, 0x9) [ 616.650382][ T27] audit: type=1804 audit(1592381341.932:20): pid=18116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/311/bus" dev="sda1" ino=16068 res=1 [ 616.673272][T18118] IPVS: ftp: loaded support on port[0] = 21 [ 616.683437][T18109] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 616.835058][T18139] IPVS: ftp: loaded support on port[0] = 21 [ 618.302299][T12518] tipc: TX() has been purged, node left! [ 618.512311][T12518] tipc: TX() has been purged, node left! [ 618.692256][T12518] tipc: TX() has been purged, node left! [ 618.922646][ T0] NOHZ: local_softirq_pending 08 08:09:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="04bc0100010000020000fa0095e0612687ecb86a54880aa941000000000000004e2f98b579a782d270106d0e0206e7ff9f5400d7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='usrjquota=']) 08:09:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x20024b, 0x20000000209, 0x1}) 08:09:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:09:04 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xf}, {0x0}, {&(0x7f00000002c0)=""/8, 0x8}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x128, &(0x7f0000000540)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 08:09:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x81) recvmmsg(r1, &(0x7f00000006c0), 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:09:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5c6558df5c9ba2a8430a1803068482d9eed2f7a091be260051256b26d66fe7846b81b675474340c1437d6b490a7d113b6ed00a587e8033c14214b81ddd4df6bbe9bd9edebae31277172f4a7158d0077035ddc81cadd24270f872dd22f93fe94354e60deaaa84cb0665206f55078633f282fb2386e35434990ff9b5a5d7de34f0238b327a42211f2b894bab8bf7ee2cf33b9435ba723c13716c5fece206f75c0ad73fdea84f84bdf00dbaa9c283bc0fb6b01e2e47b3ed7ad365e8295e6fd58c16"], 0x0) sendfile(r4, r8, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080fffffffe) 08:09:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 08:09:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={r2, 0x0, 0xd, 0x0, 0x0}, 0x20) [ 619.193407][T18198] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 619.219683][ T27] audit: type=1804 audit(1592381344.503:21): pid=18204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/312/bus" dev="sda1" ino=16083 res=1 [ 619.299243][T18207] IPVS: ftp: loaded support on port[0] = 21 08:09:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:09:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x44000102, 0x0) 08:09:04 executing program 1: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0xfffffffffffffffe, 0x0) keyctl$invalidate(0x15, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss, @window={0x3, 0x0, 0x401}, @mss, @mss], 0x20000000000000ec) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x14, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"]}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) [ 619.719662][T18239] IPVS: ftp: loaded support on port[0] = 21 08:09:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x44000102, 0x0) 08:09:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="5c6558df5c9ba2a8430a1803068482d9eed2f7a091be260051256b26d66fe7846b81b675474340c1437d6b490a7d113b6ed00a587e8033c14214b81ddd4df6bbe9bd9edebae31277172f4a7158d0077035ddc81cadd24270f872dd22f93fe94354e60deaaa84cb0665206f55078633f282fb2386e35434990ff9b5a5d7de34f0238b327a42211f2b894bab8bf7ee2cf33b9435ba723c13716c5fece206f75c0ad73fdea84f84bdf00dbaa9c283bc0fb6b01e2e47b3ed7ad365e8295e6fd58c16"], 0x0) sendfile(r4, r8, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080fffffffe) 08:09:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000089}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c74, 0x0, @perf_config_ext={0x4}, 0x48000, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4004000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 08:09:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, 0x0, 0x0, 0x44000102, 0x0) [ 620.220827][T18295] IPVS: ftp: loaded support on port[0] = 21 [ 620.276088][ T27] audit: type=1804 audit(1592381345.563:22): pid=18297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir934053345/syzkaller.Om70zh/313/bus" dev="sda1" ino=16087 res=1 [ 620.462159][T18312] ================================================================== [ 620.470298][T18312] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 620.478174][T18312] [ 620.480498][T18312] write to 0xffff8880b5922a80 of 8 bytes by task 18297 on cpu 1: [ 620.488234][T18312] __mark_inode_dirty+0x5e6/0x940 [ 620.493252][T18312] generic_update_time+0x184/0x270 [ 620.498357][T18312] update_time+0x7d/0x90 [ 620.503041][T18312] touch_atime+0x13f/0x150 [ 620.507462][T18312] generic_file_read_iter+0x12fa/0x18c0 [ 620.513009][T18312] ext4_file_read_iter+0x103/0x360 [ 620.518128][T18312] generic_file_splice_read+0x2df/0x470 [ 620.523663][T18312] do_splice_to+0xc7/0x100 [ 620.528070][T18312] splice_direct_to_actor+0x1b9/0x540 [ 620.533467][T18312] do_splice_direct+0x152/0x1d0 [ 620.538311][T18312] do_sendfile+0x380/0x800 [ 620.542734][T18312] __x64_sys_sendfile64+0x121/0x140 [ 620.547921][T18312] do_syscall_64+0xc7/0x3b0 [ 620.552414][T18312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 620.558357][T18312] [ 620.560692][T18312] read to 0xffff8880b5922a80 of 8 bytes by task 18312 on cpu 0: [ 620.568333][T18312] __mark_inode_dirty+0xb6/0x940 [ 620.573269][T18312] mark_buffer_dirty+0x28b/0x2b0 [ 620.578199][T18312] __block_commit_write.isra.0+0x11d/0x170 [ 620.583994][T18312] block_write_end+0x6d/0x140 [ 620.588660][T18312] generic_write_end+0x8c/0x290 [ 620.593536][T18312] ext4_da_write_end+0x162/0x690 [ 620.598462][T18312] generic_perform_write+0x1d7/0x320 [ 620.603738][T18312] ext4_buffered_write_iter+0x14e/0x280 [ 620.609277][T18312] ext4_file_write_iter+0xf4/0xd30 [ 620.614382][T18312] do_iter_readv_writev+0x4a7/0x5d0 [ 620.619717][T18312] do_iter_write+0x137/0x3a0 [ 620.624305][T18312] vfs_iter_write+0x56/0x80 [ 620.628807][T18312] iter_file_splice_write+0x530/0x830 [ 620.634171][T18312] direct_splice_actor+0x97/0xb0 [ 620.639147][T18312] splice_direct_to_actor+0x22f/0x540 [ 620.644520][T18312] do_splice_direct+0x152/0x1d0 [ 620.649467][T18312] do_sendfile+0x380/0x800 [ 620.653879][T18312] __x64_sys_sendfile64+0xb8/0x140 [ 620.659009][T18312] do_syscall_64+0xc7/0x3b0 [ 620.663506][T18312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 620.669376][T18312] [ 620.671685][T18312] Reported by Kernel Concurrency Sanitizer on: [ 620.677829][T18312] CPU: 0 PID: 18312 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 620.686564][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.696600][T18312] ================================================================== [ 620.704639][T18312] Kernel panic - not syncing: panic_on_warn set ... [ 620.711215][T18312] CPU: 0 PID: 18312 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 620.719875][T18312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.729925][T18312] Call Trace: [ 620.733217][T18312] dump_stack+0x11d/0x187 [ 620.737540][T18312] panic+0x210/0x640 [ 620.741427][T18312] ? vprintk_func+0x89/0x13a [ 620.746009][T18312] kcsan_report.cold+0xc/0x1a [ 620.750683][T18312] kcsan_setup_watchpoint+0x3fb/0x440 [ 620.756152][T18312] __mark_inode_dirty+0xb6/0x940 [ 620.761165][T18312] mark_buffer_dirty+0x28b/0x2b0 [ 620.766091][T18312] __block_commit_write.isra.0+0x11d/0x170 [ 620.771883][T18312] block_write_end+0x6d/0x140 [ 620.776547][T18312] generic_write_end+0x8c/0x290 [ 620.781394][T18312] ext4_da_write_end+0x162/0x690 [ 620.786326][T18312] ? ext4_write_end+0x920/0x920 [ 620.791169][T18312] generic_perform_write+0x1d7/0x320 [ 620.796447][T18312] ext4_buffered_write_iter+0x14e/0x280 [ 620.801980][T18312] ext4_file_write_iter+0xf4/0xd30 [ 620.807077][T18312] ? common_file_perm+0x1d1/0x490 [ 620.812095][T18312] do_iter_readv_writev+0x4a7/0x5d0 [ 620.817287][T18312] do_iter_write+0x137/0x3a0 [ 620.821864][T18312] ? __kmalloc+0x278/0x640 [ 620.826271][T18312] vfs_iter_write+0x56/0x80 [ 620.830767][T18312] iter_file_splice_write+0x530/0x830 [ 620.836141][T18312] ? page_cache_pipe_buf_release+0x190/0x190 [ 620.842114][T18312] direct_splice_actor+0x97/0xb0 [ 620.847051][T18312] splice_direct_to_actor+0x22f/0x540 [ 620.852415][T18312] ? generic_pipe_buf_nosteal+0x20/0x20 [ 620.857973][T18312] do_splice_direct+0x152/0x1d0 [ 620.862819][T18312] do_sendfile+0x380/0x800 [ 620.867231][T18312] __x64_sys_sendfile64+0xb8/0x140 [ 620.872335][T18312] do_syscall_64+0xc7/0x3b0 [ 620.876850][T18312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 620.882724][T18312] RIP: 0033:0x45ca59 [ 620.886610][T18312] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.906195][T18312] RSP: 002b:00007ffab074ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 620.914598][T18312] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 620.922568][T18312] RDX: 0000000020000100 RSI: 0000000000000006 RDI: 0000000000000006 [ 620.930531][T18312] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 620.938503][T18312] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 620.946473][T18312] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007ffab074f6d4 [ 620.955578][T18312] Kernel Offset: disabled [ 620.959914][T18312] Rebooting in 86400 seconds..