414ff6d2258b8f9270e39cf74bee6067518e33db1", 0x46}, {&(0x7f0000003980)="2179f3961c10a963fdabefd1ae4c82cc7c6b8bf220f96f9a3fe3e732585d4f7b788cd68f69ae20c978becdac8499d897e2e830e5908c1d925c5a1cdd2aea37ace4432abfa1a37c03293bbbb69e790c1ed9ea12af1750302b4715e06de78ef452c8dba9e3ac211691db85c634cbbac49a5c6883df8c", 0x75}, {&(0x7f0000003a00)="7d7beb058a181ee1937490384d4a6be8037f95f117fd9ca0fd1d07443631054017b27f3e3de8de3d133a7c9d819079e965a68c13345e955d067c639e261b4c3461c86bc6036abe7230c9b385315f3f8590ee7b42b996", 0x56}, {&(0x7f0000003a80)="163f07b09cd2295479793754368b0c1262f36a7d131137c182162f8b49ce8a30ff634f6a8cff2513e3be9f46d8c4c01e933a51b96481102f6e08e8b4b1d061f33f78a40c0ac4f58d8f3a77a9c0bbd5", 0x4f}, {&(0x7f0000003b00)="274d74eecb9a76c4f8e04edeeefa74039f58ff4504fa1dba9cdfaf556c97f888447eb2f955913b24605e8db7a5d3688e890c1571bab6959c78e76b66687a29085c00fdb7d3f1921b7a6874e039471d7a95c94805b6e5725653423d57cb3dfba28c96326935bded0d9a57508abfc5602300e4c3d8e0a2ba73fd89e802ce61237b8f57d709", 0x84}], 0x9, &(0x7f0000003c40)=[@iv={0x100, 0x117, 0x2, 0xef, "4486c942a761d5084ddb0187afa32aa38af1effbb573ec27fd27ccf964096a4de0aee849de3aa0fdb8afec5b5ac61602047ffdef7e42b639d3ca690e932cd6165fa359c3608748608220541dda8bf5343ee614333d05a598f9f33d9b7c645785f443667103c1ea2bff9389ec7eaee16d501c8e79e3945aecff253af7d9e5b033d758019c1c22bf7fde1a0303188b5c74d3dab4396e583923fa343a19f98addf598a97c7ad0c8fd0364b86e6d7478d5109302d91fc6feab99b6786f65a6674ac46937e2d4051b28567097f6b7d8c474d8b8f058c51eade443e9127e74b21fdbed1ad43ab36ee13219b4c4c690d9cb37"}, @assoc={0x10, 0x117, 0x4, 0x100000000}], 0x110, 0x24000000}, {0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003d80)="9507dbb873d293df880251ae9d055c7fe4974fa5eb8a0df71edeb6874de36fe467254e587e94ffbf0654a448e56a93836cc2425dd91688ea68a0b36cf14bde139fa47c1bf6c278e73e14e21c8dd269bff59cb6933ffd09d8da6c86faa9edbf53c99ced9096db2bc0e52e5506064268c2436673302588", 0x76}], 0x1, 0x0, 0x0, 0x40094}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003e40)="eb45f6be2879b470103ae6bee36b648f86a0d29115dc85194717a5425e0bb49dbec3c62320481dd799d1b5b959c70fb52281618475e8dc765d2d87e0f4f618986a0ab65eac06fea01d100b803f75cd582d699d443b326c7cd1a4c3b6a7eacdc9bd05e388ee0c9c2f4fff8b42866c323bb25fe512095601b43929c53d34d0d691792dda151b7d97b8d6577ddcfe8104c1d0d391975cf3e4ca186ed15f1dde6d1f805456fdd5c428dea125ad3c326249fa0a2b32283c12925580", 0xb9}, {&(0x7f0000003f00)="2b88a380dafb4bc249436ddfef", 0xd}, {&(0x7f0000003f40)="6e06a096851a50f1d7d07a917ec1ae46bedf5df515", 0x15}], 0x3, &(0x7f0000003fc0)=[@op={0x10, 0x117, 0x3, 0x1}, @iv={0x5c, 0x117, 0x2, 0x4a, "44b997a203830229e7b228b90f719048712caf526bc585abf958e17e3e7ec36cf8b110eae76f2419c028370de14727998918a7ccecd8e722f3e532b6100f7b558c569148b94256bdb960"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x800}], 0x8c, 0x4}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004080)="d9adf2560adb98a3e0e45051e76381db91f017ad47b8483f4af8d845789d6be1582602e10018c30706270d449734bf013cfb38b6c49e8077ca7a8949bcc8165496d53c13e452848123ff039bc1b4bfd28720e92744298e13cca83ef027c1b8e3fc1a03c43d687c4a7748b98e3f", 0x6d}, {&(0x7f0000004100)="d02b2d23dff7eecceb5d8d0550e07c2e78c3457e5d12c565a2def1666bcef12679722a65a25243866d80eefda6459563cae8020d24366a6341190db8f96f921215370342097e8cfa0d23a3f4fc0ab3898969f3afee4cacc4d3c91d91621174cc07ad6057622da344c4df4a061c3640ace7caf5b1c18f7ae0dba4d06245f179e72824e5023ceb0f66c207eaf1632c6c50f053c3e9b9071985ca28f3d17e9f0f1327c5f2e81533554d14f11e3710cbcfe66b1890ea3e5d94cd58910f7e88d6a81f7e16e9c9042161e0dfa0f8c2fdf1fccfb65e7c9a3b3a875ded27a7112ab1be2fec01dff27190", 0xe6}, {&(0x7f0000004200)}, {&(0x7f0000004240)="1b012a8d2bb489876c805bfb8f9d", 0xe}], 0x4, &(0x7f00000042c0)=[@iv={0x98, 0x117, 0x2, 0x85, "acba20e74d2c741879c64744d1c6eea922838a1336e94df0802587524385b153c0f2f12093788f5d1d78366e436950f6e84a46bbfcff46275085eebf5cc42403834b3c590afafa9341e33fbbf52cd2dc0c2062366b46901e508de587022893560a63653e72388f1aa4c29fe4a7d01714628dc7b0483afd1dd642a1f94cda159ea1fdd04c65"}, @iv={0xc0, 0x117, 0x2, 0xaf, "7eaf351ba7fe891bebab270eeaee13c876339732628fdcbebbb5d86fe312e897c348eb60c92fb0f9fa96e90ba93d6a622e5c18b8c128739bd24300b3de23904ade680d650adf68f0d8c06da68365dd25620ebfbebb1dbbc7a155acfe8f489ceee846f225b4981f98dcde57eacd0a3439677192f7729dddbc7d4361d13fb4bfa5f368e3c69e11af04abaf9b210010337b40860ade7991c72ba45b3a4fb2b760186a0a6f431b59d94728fc05d57317f9"}], 0x158, 0x20000000}, {0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000004440)="d816d2718ae48a1213d08f76168114a8211e86107ac1864472dbfa717f3d6b12a2073a44422d5a127c7cdd9336687f570b1950e1c251379d31f89528", 0x3c}, {&(0x7f0000004480)="f791878df26a038bc06b9dc440473fe23ee086a40af582cf00c4c98c682f8a3a109e53eeed318d76e821ec1a28943d16196627ae64c7bb8fd7bc61e1da4e713dfbb8a75bed4c394c822f42796234ef01d45a65c8f4c14258036cefafca535783c69015bdc2a99292cc9f2d4d0023eb276dac1a653f6605a9ce6617dc1770c5c4ac465dcfc76d1d2258492a86a8a2c3418348d40e2d9f2fd381", 0x99}], 0x2, &(0x7f0000004580)=[@assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10, 0x117, 0x4, 0x1}, @assoc={0x10, 0x117, 0x4, 0x8}, @iv={0x18, 0x117, 0x2, 0x8, "cf75617d8921f575"}, @assoc={0x10, 0x117, 0x4, 0x23b9}, @iv={0xd8, 0x117, 0x2, 0xc6, "4908ef7765cc9a1af46b2f2ef94d90678ca059dd0a4085a2b01d901ce42d9a54dc3f6e5ea7369fbe38223f43452b153426924e7a2c7b4a93a20330d6bb19d217fd0b71753ae094baaa2e046c74048fdfdccd48ee6a4ab210f18c849c0c64e5c12cc3fd15ef7d6342a708475d5b5c161dbfb62459771d9539afd2a12bbdd06c24c98cedd6ff4baa7b7e00c6821f89525e456f0b3686376a5872e373ae0f059f75583515595fc508821b25ca7151e09fb13b3cccac98a65b42d3c58063b2c7e52961f3d42279ee"}, @op={0x10}, @op={0x10}], 0x150, 0x24008840}], 0x6, 0x4000000) readahead(r3, 0x7, 0x9) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 908.902768] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:20 executing program 2: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x0) lsetxattr$security_selinux(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:tzdata_exec_t:s0\x00', 0x23, 0x1) 01:17:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 909.085166] print_req_error: I/O error, dev loop0, sector 168 01:17:20 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x9) r1 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) select(0x40, &(0x7f0000002000), &(0x7f0000000040), &(0x7f0000000fc0)={0x200080000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000001000)={0x0, 0x2710}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000003080)=ANY=[@ANYBLOB="00010010acfb6cb6479dae6f3b3a144419155033d6cd62d856c5f1b60a22e5a3edc600fc2d193c151593a5c2d3f88df120efd0e8857ad99cc8ddd1c4fd67f692a8d3d4396d6251a530f080d33a6132020e7d857eb64262f3dd51567f6ac7ef6010d176d49b102d34db49eacd70de681ec0af095f802d08c9dc2de3a05803f469b6e853755b72b31f4bd27d80e9981ff00b41afe4e1cc46e11ea969843b5c944fa4cd2fed539a429e0b25a09e512e18dfc6dd210775124eb382d5a9ce99ec78d5462eda1f6b49cc25bc6a7fcfc08be5745cba78a88544bf6da98ecdf108845d20610dc603ed6c7f614c225ddcd9364dfcf1f3e944383979e3dfeabbcd8f53911f61d3e3954d7f384d28f05a0e3738ce26389f19d18cb694a905b044efc60222dd7d703df273b643f280f16f358b33979c8291720cd0ac4534d6eee1f80cb607f8b78104b2572fd9b2d2b9b4c9776694114cb1b2cff8d30ba096313c115cbb996c6d49c8af966766dbbc3e414538ae7294addb62a537b04b159bb2e9bdd794bc8cd8da50167a12954ef67632b9238fae9bd8af4e39c280fb77aa6a22f2515da70335370080c2677cbc6aab191381e712d4222ae5406675943e09000000000000004f21a9febb2ba0381eddce87888aa4193184ce3d2f94844416515720a37db43c6714ad74d257d7034b04647cca45b38edad4378b7a98982d1bf737f7aa6abe9065907fff35f243f76f737ee0042a83144bed718d1ce16f0f6e4240ec7be3b2bde9bf4c190117b3278b3f9890e1417445b8ac442def976fc4190986fc68665347ab5b55d8f3b95c6ebf6997a61c83e733d528020507cd58e07be75eca658a523e45a0774c71ffb282bd7d9e7cf840bca0adf54c671d52605badd78fbf73c561a94174bdb66485dc7ca8c3d59153af5e2ccf3a2f201a22576fade8bc9c13252c672b3e5c538360b581bbb6b7c3245a5a0ec02b83db704823a599ff805193a970881b9f2f2b6e34d36b58812a2cc4f47d66017d268a7cf35b0285f929afe3b4cf1694d141b8c36dd47d16f88e411938f5adb488a0d95f95575b09c18a25bd36a353bc958825c34a856d8797f51283a6c6cc19c82fcc7d00ca43250cdcd7e9072bd810f35f643c9a1e63d4cfc885ace98d418adbc8d0772179c0ee8e2d0510428e96a294867b7beb8862c3aaf4ad5d41bf75d446ea0278eba969121a2f5154b617de69acd78ee35f3ad32e06f7f94c73145f0e8f038235677a6e4f7c22bfb0f154bfebc0ae10e3807fffbad4f1cdbaa83b05a89b4f8a398173bd5d3d5e805b1b056a068217e099b296b52b6e09227de090a7b4bc5ea33c9a18edf0cdff496a4c1e29ff16994f0563324e05f5fe0754e9661fa9452372d977c3e8fa0caebc6efb3cc113eaf498baa0b53918cc0a50bfbba9ab5a5e3a3986229e60c6a2f87d97baf5bed6a3a1c6c80988eb34b881414a2800bafc677512089b9d398099a717855220b3bbc4a39aa0c9a27096324e12623c715c2d1e7c303097dd197801331049a2205cb03491a507a60d8305fb4df77909c69d3e5e85ce9a3ef13a0b5118e2ad9333036c43b969e27d162c7e5d07a1df7098864cfad077683b85fc7c8a2d3a3a38eff811cb79c2ce4f6891217608625840d2963330785a551170166e7feefa53b699a158ef47abe012742d1acbfcc8170237895139573fe39eb9640d0be9f08047451afaf202ff1b880c189f738b7ce7e6455ee6a0c48e9c6d8084ae60a3d597feaaf6fd5286982f8fdc49c577b57192ff4fec203fba2fc8dbbbd8908879f30d5ccfcfd8c2897896daa6fe16475dae345adf5018e464cc4aa37ad00fda5181c19cbca92b858215413409d10decf22841b216153021c621c12b4e71e95a4bd9f5172c9e8abb59525de81945e005a3db61050f829fc6fc41911a1a56c0023bbf79d8afd8c016d9c9395cfb81affa16f7c183147eb7599fb2250bc4d7cc771f1be05ffd03bfe5d8865356548a9fc78a0be16597905d511524cad30ce1d08c5c9fd12c4c3b132c6de842f2c097897b8647491c517e2ee0a13629c83b9f1e71e86b0505366495a753aafd75386695f65ce0717f6f0dd094c2323c6d3ca6301f94b0a80f1c6c3b59a02d5e7dd20352924dddc019a34d398623f7118c9769556e372054e15e90e64699aaf7d39d03848c3665c613aec797cc1590c8fa5383de67b1346a307cf17fc60de291b8f23865ef4ef75b8c041c04debba861237d73290025b980c277645f63d6e97704e5be7a84667d3971104a20eed173aee6944992fcf424b023cdcc3a5b5ca250388259c264b6a423b5f3f982d566905e02f873d19e6dd4fdc52320914845d3e650ef1386bd2f563c5bb4e6f0204ef0a89f231c950c17f95dfa9823cc8558d9dea056fb8f73a998f8c69d247c78815563058bcd46fe2b2d4bd20a97adb8b4dadf6f1799b1a1abd43daeb6f9e44febfcc116b52d9c06a03076241aee72993f3f6e538eb91f23c04487ce2718d39d258a7d40d3da6197ef05b97f33dbba479b811416745c41d9f9bdd28dd0670483822671f214ec0e13c421bb8fc67703f29bc39df22f8a2b3f1bb8fe778f35814e20c6670a579278af40b2697f2b40d0d7b101a0df6ae936b876e627eb694de17b942d3a60736a9469bb54815b7d4ff4e7dbc9f7d3d4b5973c0ede1313180e60674c7fa709c6e5617660c16e549e9edb14adde63ecf42c8439330fd21447e6cce558bfc5066ec88ed110190ea4f3648e95280bb8ec2a008d0ff96f153fe5387a8f335b7c6ff2f5313f3d003bfe2d8b685b7e67523c218ec4ef2d4d0ec91085688c9af548e0d20e9c2c8438c4adba686469b31bb56753a7cb77fcee4436ced29643ff532c140c75774be34eb31b73e0ad4784504e0f1a73a617d85932fa3834b5e8ce55f7a5340700d545dcd2ace794d69441845c9e339990464e1418b121d56a3df46557e45702162164832fa2f766eec1e66d62fcecc79c16457c5b293d9300b45570d1fe2fd34fed44ec5a400dc8604b93b57b839537ffcae0eb63958e92d29d94d75842cea2d4f2c1daafda75f8147afa8ca44c12abcaf1eb461e65e8f63e9656255a1bd33f4259ea75c4a4c21729b24f84430ec9ade5500c8d6b1ac3147892f5b7eb9aa548a8efd870d6ee9158e761247ced796317a6550d093a975bd0dba0ddd72ab6f3c5b27ae327d0e430a0e36b840dc7e64da60b6250a4c90df28e4eb459c7a27397a9e4272ce2de6484be7a35661ce9382c06d272e4071bde8bd316d50be35dc9a13ea1efa3e0dd898b60c17345abda36fe4a08d63ffd47f9689c1d9681f321025e8487793b3c53f6c8e237d4424f9f8c86bc304e6b3d5d4ff84fc710408730d168ed358dcf2020a7a2db8fdd77c0eff6557d520a8d9aa0a658f181b97ef385589f438c01d1a48956c518bd11b64cd5d0d1042323128842b9320870c3baadf62377527ca2a2ece6fecfcb70cef9405b1291b9662ec2386f3f38f0528926b918acc91e2e40ce5b8253f58d0b4b66abce27a9845bbc07e6d03e3a1100f02709de64d92486faf3abe44f443934c795095c729dbfaa0b39a82d3facbf71f48493b2ba4adc3c346e0991f30e809e48246f066de215710add2ca2c49dff4eae91e38bdc2e5e4510721f054969f32e953c5e207f58662dcf3cb2aaed0ff3ed5b688e8cad449a778c0e03aa0261cc06d0b2375a75aa29fc84677f7221c85e2537286e64ac02fd08149dc47058872c04b0df967fd5050cbe0bd2abf3ccfc1c8e2aee0e9958a2b352c72d5cbfade44b69afa15aae6654d32b4e2b077ff724afd1bc98a03a688ee36cf6c60825192b7ef4534ba269e78f47270b982cbc62aebcdfa8c8b93167640c5cb2ddaa2454ef91e536d9540f2c31f110e5bd05a023bfed1cca7e761d96b7c146364e8bfb7dcc55f110a41671401111cd4682d08aedef2530b1e0189580fd4cf056d572c078c8a17b672f2d48c2d9235407871293ff0e09acfd8b05497ab41a331d8461722a7e0900000000000000b6611945940b6c661513440be010f60d96da8ef35e71692f75da5450fdc731d7119d91b0805f9854aaf21e8e51286746e4f7e042948b5312a791b2d570ec1bb8a2fb2b9e0110713c602113a7fb61ebaf347e2d4faaf8cff9321ad833c54d96a09b1befe5c4ddb2cfe7a9ee361a96eab94a9b0d860049ce97b1358eece60b77c5dddcbbbed749ac49fce6e288d871890736ea039a75a37c51a5115cfad247cb080b654e34972918da473028c3da25b4b688b728a3d9e1edf88fbe20eda188a5d971f44ea71246a874f0cd448c46b85e270fe098b651c9cb4802b6ea180edbcdd73d85e1a85f987a90756b9a9670fba4442c18e112d2793e4e36b33010470c304bf254441d75887b08e3361379cea7fefefcfa9b4d0c2915c9d8b3d2ef161ab9244c4299ffe7e3c41beac0b690856bd0c2cb201e2ff8a4ce9ec18d6fdeeed5eff7e5e20b21010cef59333e6fb4bcb98841763813959d43721aab12875ca676b54fc0d40010a2fde7f5b676140d4591d2eabb81165cdb12fa32bd29b8335cb333960183cfe71e6408c06fb6e02c1f02f3a094ab1c7cd4c420b5be949f99e0d0006a942be97f5ad393abf3450d6344f6d28371407987e1d6e32f22d1059cca4b56c1280916894567ba57cc2c26694318e6f62d47a54e1b79c472b3788827aa7fa3497640da34ef628bcdb4870b75ab44eea69d2d965412e10cb3f6382b6b0031a62ddec4f29129a2d018f255d0f9f3da29eb0fb90fcb437d6bd8f9183af98a93eb8496170614a2180cc25faba79751f0e4d94744f31736a730c2f8b3d84a77180cd913e36e3d270657a11ba4cbcde1a9a249ff90c2821a518300000000c700c468526c45aa702b36d08c1442fc36fac7b217f1ac62de33ae68544ecbbfff6320241322c8fa53bb558ebe103b5fc4f588a3771c3c72e349020ad003f3414e33aaee027f5b50fb0113caae8e8dd1b3b903c5b72bcb859a4ab85788a614f40c322dec1a5bfac423ef5ce379f169b6d259383dcc9fcff365002691a1e1ffffff4bccf1577f357d8f52b5ef67ef051e9983a452eb157e4b3f8224fab4e58ece3c9e6e1f135a54b54d7db6bbeda0eec7ea8ceed32ed3b735e6e0d1b517c066459d3d7f20e24936c8f063face35a3421af1e4a2a2c6516e558bf54a78a43af0201331e860df7e8b710cf8e57aaa0047ea8b7b885f190a5ed6c382457be01c248701e15b784a47fd8cbd1e675eac7b6a7d379af0db820b9091ed092b1db40536da5d88288afaffb91ddfa18ba4803695823e51dc8a24e940e517513475505a7db6049057e0075c78122f39aa2bd6a661ee3cb2f093"], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x101, 0x2, 0x2, 0x4, 0x0, 0x3, 0x2cc, 0x2, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xd2a}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x40, &(0x7f0000000f9b), 0x0) 01:17:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:20 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x1000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:20 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x8}}}, 0xffffffffffffff60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x2002) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x0, 0x8, &(0x7f0000000080)=0x8001}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00009e7000)={&(0x7f0000bfeff4), 0xc, &(0x7f0000329000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001c000905000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="9ce3fd1bba211e8a330ae34e370960362fd7a16c55df6a16dafa3e2114de52818489fac847fc052be28ee3ddd9376805596d65dbec760759fd0c1d3aef9ac4bbf4f62e7b5ff5394db051bd30e49a5f8f2696fd94af880bee88e9c590017fd906d66785036c0350deb8364c775caca5191a2764d119ce507c880223c48c2a7a95deec0093616478b40bfec49849758e21"], 0x24}}, 0x0) 01:17:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xa, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 909.515838] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 01:17:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) [ 909.564865] print_req_error: I/O error, dev loop0, sector 672 [ 909.571361] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 909.589114] print_req_error: I/O error, dev loop0, sector 1696 01:17:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xf0ffffff, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"76eb61d99a5dac9c0000902e00", 0x1002}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @loopback}, {0x0, @random="4fd38673b806"}, 0x4, {0x2, 0x0, @local}, 'vlan0\x00'}) socketpair$inet(0x2, 0x7, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8ece, 0x20, 0x46, 0x0, 0x1000}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x40, 0x81}, 0x8) 01:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 909.857632] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:21 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5500, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 910.209986] print_req_error: I/O error, dev loop0, sector 248 [ 910.216065] Buffer I/O error on dev loop0, logical block 31, lost async page write 01:17:21 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x8302}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=@ipv6_getroute={0x1c, 0x1a, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x1c}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80400) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) 01:17:21 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2800000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x74, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:21 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2040) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='status\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x2, 0x5001, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 01:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000009d2e0019010000000000000000030000000c0000000800080000000000"], 0x20}}, 0x0) [ 910.643767] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 910.685621] print_req_error: I/O error, dev loop0, sector 0 01:17:21 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setown(r0, 0x8, r1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setpriority(0x3, 0x0, 0x0) 01:17:22 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1200000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 910.882979] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 911.056577] print_req_error: I/O error, dev loop0, sector 0 01:17:22 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x6400}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200201, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0xe604ac1893860051, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000005b0000781a158ca230da55e2af00aa02037a46b1274e885c0aec2075ff1869460b2c626dff1f0ea0308487334b096143b69be5f63cf228617c5ccdb0dfa226b1a67d24cdfe1d3c154719c3237c2cd991e620891fa25727d116137f7eaaf6f8a71c26445974579495a2"], &(0x7f0000000140)=0x7f) 01:17:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:22 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f00000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:22 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2800000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000000, 0x0) r1 = socket(0x4, 0x80801, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0x5}, &(0x7f0000000280)=0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x6}, 0x10, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x6, 0x40000010]}) 01:17:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:22 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2800000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 911.609762] print_req_error: I/O error, dev loop0, sector 112 [ 911.615816] Buffer I/O error on dev loop0, logical block 14, lost async page write 01:17:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:22 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x24000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:23 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x600}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x700000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x80000004, 0x4007e) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x68) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:23 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2100, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000580)='/dev/amidi#\x00', 0x8000, 0x208000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) kexec_load(0x0, 0x0, &(0x7f0000000a40), 0x0) r2 = dup2(r0, r0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'irlan0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={@mcast1, r3}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000840)={0x5, 0x200, 0xfffffffffffffff8, 0xffff, 0x0}, &(0x7f0000000880)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000008c0)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x7f}, 0x88) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000440)) utime(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x1, 0x8}) r5 = mmap$binder(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x101010, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x10, &(0x7f00000005c0)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @flat={0x776a2a85, 0xa, r5, 0x3}, @fda={0x66646185, 0x2, 0x0, 0x20}], &(0x7f0000000640)=[0x18, 0x38]}}], 0xc1, 0x0, &(0x7f0000000700)="21fbf1b2c795c16bce21f2b91116c2e439e8bd4ce267be2aa3b529e482cbd6e867e9c4eed2719b06557254208eba384957b05497cc7286d01b6db22869fd11ad086520d52baa1b515f30602a1cbe7caf64a3263d408f7112ff4ecac5bac86a6e00f297a90364a363931300f48b73a684d0af4e48696a2f41ffc668b851f8e9d3c645fcc02d08d0965d7f82e67aca7a6ad257286a529adef9942f33ec4a5a8da9aedc0adfb26bcc2dffeef4e5463047f196cf76b00663d38244f5006b4006e44629"}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000300)=0x4) write$FUSE_BMAP(r6, &(0x7f0000000480)={0x18, 0x0, 0x5}, 0x18) shutdown(r2, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000340)={'dummy0\x00', 0x600}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000004c0)={0x5, 0x98, 0x4, 0x1, 0x40}) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/67) 01:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb13296539860415a3a3d2580ccf43f0da4", 0x19}], 0x1) write(r0, &(0x7f0000805000), 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000180)) read(r1, &(0x7f0000000000)=""/253, 0xfd) 01:17:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x20c400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000240)={0x1f, 0x1fb, 0x1f, 'queue1\x00', 0x1}) [ 912.534996] futex_atomic_op_inuser: 2 callbacks suppressed [ 912.535007] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 912.616243] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:23 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000317fa3)="b5", 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3d00c6fc390144fb13296539860415a3a3d2580ccf43f0da4", 0x19}], 0x1) write(r0, &(0x7f0000805000), 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000180)) read(r1, &(0x7f0000000000)=""/253, 0xfd) 01:17:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 913.324293] print_req_error: 1 callbacks suppressed [ 913.324301] print_req_error: I/O error, dev loop0, sector 0 [ 913.342606] print_req_error: I/O error, dev loop0, sector 0 01:17:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d03, 0x1fffe, 0x7fffffff]}) 01:17:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x300000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:24 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x8}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:24 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xff0f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 01:17:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 913.561983] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x181400) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000080)=0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 913.629117] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x126, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x74000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3, 0x83, 0x3, 0x5, 0x2, 0x4}, @ipv6={0x3, 0x6, 'zDW', 0x20fc, 0x3b, 0x6, @dev={0xfe, 0x80, [], 0x13}, @empty, {[@dstopts={0x0, 0x209, [], [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2000000000, 0x8, 0x10000, 0x8000, [0xd1c, 0x81, 0x732bc746, 0x4]}}, @pad1, @generic={0xfffffffffffffffc, 0x1000, "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"}]}, @srh={0x3c, 0x0, 0x4, 0x0, 0x0, 0x40, 0xff}, @routing={0x0, 0x0, 0x3, 0x80000000}, @srh={0x0, 0xc, 0x4, 0x6, 0x57, 0xdd80be197b4b84ac, 0xc6, [@loopback, @dev={0xfe, 0x80, [], 0x1d}, @ipv4={[], [], @remote}, @dev={0xfe, 0x80, [], 0x17}, @local, @ipv4={[], [], @multicast1}]}], @udp={0x4e24, 0x4e24, 0x102c, 0x0, [@guehdr={0x2, 0x800, 0x7ff, 0x6984, 0x35f7b87014fa0edd, [0x80]}, @guehdr={0x2, 0x11, 0x100000000, 0x5, 0x100, [0x80]}, @guehdr={0x1, 0x0, 0x6, 0x9, 0x100}, @guehdr={0x2, 0x7, 0x4, 0x101, 0x100, [0x80]}, @guehdr={0x1, 0x7, 0x2d3, 0x8, 0x100}, @guehdr={0x1, 0x4e3, 0x7fff, 0x8a9, 0x100}], "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"}}}}, 0x212e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 914.241521] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:25 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0xfffffdfe}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 914.431092] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 914.478377] print_req_error: I/O error, dev loop0, sector 0 [ 914.484318] print_req_error: I/O error, dev loop0, sector 0 01:17:25 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7c, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:25 executing program 2: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x1e, 0x16, 0xf, 0x1e, 0x1, 0x0, 0x3, 0x10a}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) eventfd(0x7) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x3720, 0x6, 0x800}) listen(r2, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x6817d0f2}}) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x7}, 0x8) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)={r1, 0x7fffffff, 0x100000001, "1bbe1eec47619dcd76b34260f9a1118e33c55f6ef49cba74c93c6c3af11ca8a1fad7d2c2c42fc597d70ae6dda4cd1e85dbb9140cab8422661ed0132dff2fa667ee0bfe5ff0b2d15fa0a8a907b3261b9a6db6ab93d22f4b3f5de81b3057f6d5567322b1af51ba7a8b2b07dea2613eb15e4aac79bd6902fcbdcf833a53c06ccd79f222ea39c2d7acaca12a99b013f6af7096cbe2a22cd042b266313d974c4c08f6e5be23d9"}) 01:17:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_netfilter(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x16c, 0x6, 0xa, 0x0, 0x70bd29, 0x25dfdbfe, {0x3, 0x0, 0x6}, [@nested={0xc8, 0x4f, [@generic="00630498637dc12fb687f4b00d023d1dc6044419423e3862f50d7bb99f3d048beb938668ad596662a7cbfb99ac802961eb414606bf8ca671aa37964a8f5a7f9ffb33d6b62c142977bcbc6ec655b4562df2fea4a043a8f02021aa86e8cf7b00986f20c47d23841db530654669e13448f8c1baf47e6c54821bcc3462ce31e5e1561de10e2536eab77a79e7c17cb7c8df8af5e4529d4a21b0107a6ec9590a5fcb7a027a19628178bfabde699da4e1f4232b84be6ce29ce84b8a72ad2dc2f775a64b1283f3"]}, @nested={0x7c, 0x29, [@typed={0x40, 0x17, @binary="eb2a07fa29c1f4d06ff0108b9cd234e3163de22cea48a4320ddad06fe7d797801b06ddabe6cb6e453959b6a04942a28a34674132e0572f83cbf144"}, @generic="54a65e1e3c4fee5cdec5e1f4af267974a381", @typed={0x8, 0x45, @uid=r4}, @typed={0x8, 0x3d, @u32=0x1}, @typed={0x14, 0x50, @ipv6=@mcast1}]}, @typed={0x14, 0x47, @ipv6=@ipv4={[], [], @broadcast}}]}, 0x16c}}, 0x40488c0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xa000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 914.865065] print_req_error: I/O error, dev loop0, sector 520 [ 914.956004] print_req_error: I/O error, dev loop0, sector 1584 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000001380)='/dev/vcs#\x00', 0x218, 0x80001) setsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f00000013c0)=0x6, 0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x5, 0x5}, &(0x7f0000000200)=0x8) write$UHID_CREATE(r3, &(0x7f0000001240)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/4096, 0x1000, 0x2, 0x100, 0x8000, 0x5, 0x80}, 0x11c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000001400)=0x1, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) syz_open_dev$adsp(&(0x7f0000001440)='/dev/adsp#\x00', 0x1092, 0x40000) 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 915.180706] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:26 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x64}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:26 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x700000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:26 executing program 2: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x1e, 0x16, 0xf, 0x1e, 0x1, 0x0, 0x3, 0x10a}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) eventfd(0x7) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x3720, 0x6, 0x800}) listen(r2, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x6817d0f2}}) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x7}, 0x8) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)={r1, 0x7fffffff, 0x100000001, "1bbe1eec47619dcd76b34260f9a1118e33c55f6ef49cba74c93c6c3af11ca8a1fad7d2c2c42fc597d70ae6dda4cd1e85dbb9140cab8422661ed0132dff2fa667ee0bfe5ff0b2d15fa0a8a907b3261b9a6db6ab93d22f4b3f5de81b3057f6d5567322b1af51ba7a8b2b07dea2613eb15e4aac79bd6902fcbdcf833a53c06ccd79f222ea39c2d7acaca12a99b013f6af7096cbe2a22cd042b266313d974c4c08f6e5be23d9"}) 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0xc53a, 0x0, 0x9, 0xf1a, 0xab}) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, {0x8, 0x75ba18bf, 0x1, 0xba7e, 0x4, 0x81}, 0x6b96430f}, 0xa) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) 01:17:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) open_by_handle_at(r2, &(0x7f00000000c0)={0x18, 0x2, "b79eecfd4223812eae7a9be61029bed1"}, 0x400) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x400000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0e05403, &(0x7f0000000200)={{0x0, 0x3, 0x81, 0x3, 0x101}, 0x1e4, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x1, 0x8, 0x1d66}) getsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000b40)={@broadcast, @dev, 0x0}, &(0x7f0000000b80)=0xc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000bc0)={r5, 0x1, 0x6, @dev={[], 0x1b}}, 0x10) [ 915.915766] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 915.986430] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x800000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 916.393075] print_req_error: I/O error, dev loop0, sector 0 [ 916.398974] print_req_error: I/O error, dev loop0, sector 0 01:17:27 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2500000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 2: ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000200)) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x1e, 0x16, 0xf, 0x1e, 0x1, 0x0, 0x3, 0x10a}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) eventfd(0x7) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x3720, 0x6, 0x800}) listen(r2, 0x20000000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e20, @rand_addr=0x6817d0f2}}) r3 = socket$inet6(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x1c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x7}, 0x8) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000240)={r1, 0x7fffffff, 0x100000001, "1bbe1eec47619dcd76b34260f9a1118e33c55f6ef49cba74c93c6c3af11ca8a1fad7d2c2c42fc597d70ae6dda4cd1e85dbb9140cab8422661ed0132dff2fa667ee0bfe5ff0b2d15fa0a8a907b3261b9a6db6ab93d22f4b3f5de81b3057f6d5567322b1af51ba7a8b2b07dea2613eb15e4aac79bd6902fcbdcf833a53c06ccd79f222ea39c2d7acaca12a99b013f6af7096cbe2a22cd042b266313d974c4c08f6e5be23d9"}) 01:17:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x10005, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40047703, 0x1d) 01:17:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x600000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:27 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x101280, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) set_tid_address(&(0x7f0000000000)) [ 916.717129] print_req_error: I/O error, dev loop0, sector 88 [ 916.723131] Buffer I/O error on dev loop0, logical block 11, lost async page write 01:17:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x8118000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 916.856729] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:28 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0x5000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 917.110026] print_req_error: I/O error, dev loop0, sector 128 01:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:28 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x6400000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x70000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003140)) recvmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x400027f, 0x0, &(0x7f0000003180)) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000840), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @dev, @multicast2}, &(0x7f00000007c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @rand_addr}, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x6) connect(0xffffffffffffffff, &(0x7f00000001c0)=@hci, 0x80) syslog(0x0, &(0x7f0000000480)=""/228, 0xe4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'erspan0\x00'}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 01:17:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06055c8, &(0x7f0000000080)={0x8, 0x81, {0x57, 0x20, 0x7ff, {0x1, 0x397c3bd}, {0x1f, 0x4}, @const={0x800, {0x8, 0x2, 0x5, 0x7}}}, {0x0, 0xaa8a, 0x100, {0xca4, 0x1}, {0x81, 0x3}, @const={0x54, {0x7, 0x401, 0x3, 0x8}}}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6300, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 917.760304] futex_atomic_op_inuser: 1 callbacks suppressed [ 917.760314] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendfile64(r1, r1, &(0x7f0000000040), 0x101) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000280)={0xe37af6e1180197f, @multicast2, 0x4e21, 0x2, 'sh\x00', 0x20, 0x7, 0x73}, 0x2c) fcntl$getown(r2, 0x9) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xa00, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x0, 0x91b3, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vlan0\x00', 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc1600000000000000000000000000020000000000009ec21d2c0000000007000000000000000700000000000000020000000000000000000000000000000000000000000000000000000000000001000100070000000700000000000000810000000000000000060000000000000900000000000000000000000000000000000000000000000000000000000000"]) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x100000000) syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x400000) ioctl(r0, 0x1, &(0x7f0000000200)="ef74b75b91c4b8b7090b7e02d3ddf702") sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0xfffffdef) fstatfs(r2, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 01:17:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000380)=""/24) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x69, @remote, 0x7}}, [0x6, 0x81, 0x5, 0x44, 0xffffffffffffffeb, 0x7, 0x7, 0x9, 0x5, 0xb354, 0x9, 0x8001, 0x7, 0x0, 0x1a67]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB="50000000b75a0be8c0339cb0f301c0bc17c486458085ae1619539ff4b10c9bd14538237e01eccd8a9798fa9c37e0d4462d5293624f66bdfbca1b28228ef84a8100000000000000000000000003fc4871227072c32914d8db51c2d32a707f3a10e7"], &(0x7f0000000300)=0x58) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 917.885381] Buffer I/O error on dev loop0, logical block 21, lost async page write [ 918.297934] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:29 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x8000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:29 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010, 0x10001]}) 01:17:29 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendfile64(r1, r1, &(0x7f0000000040), 0x101) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000280)={0xe37af6e1180197f, @multicast2, 0x4e21, 0x2, 'sh\x00', 0x20, 0x7, 0x73}, 0x2c) fcntl$getown(r2, 0x9) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xa00, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x0, 0x91b3, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vlan0\x00', 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc1600000000000000000000000000020000000000009ec21d2c0000000007000000000000000700000000000000020000000000000000000000000000000000000000000000000000000000000001000100070000000700000000000000810000000000000000060000000000000900000000000000000000000000000000000000000000000000000000000000"]) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x100000000) syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x400000) ioctl(r0, 0x1, &(0x7f0000000200)="ef74b75b91c4b8b7090b7e02d3ddf702") sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0xfffffdef) fstatfs(r2, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 01:17:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x60000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x13, &(0x7f0000000000)=0x1200000000, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 918.625977] print_req_error: 3 callbacks suppressed [ 918.625987] print_req_error: I/O error, dev loop0, sector 136 [ 918.637045] Buffer I/O error on dev loop0, logical block 17, lost async page write 01:17:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 918.771918] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:30 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xd00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x10000400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4400, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x59, "dbcd85b4f0d6a5871463f03eccb655777d75907106abcd328650e342785ac0b1752474cd02d7fcc1b72b72357720c9764a69723a1c17ffac5a7ea3be5be6bdca925e62c8a78901f779a0b5dedab47940ebe8686d29ca641715"}, &(0x7f0000000200)=0x61) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x5c, &(0x7f0000000300)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e24, 0x19a, @local, 0x2}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000003c0)=0xc) io_setup(0x400, &(0x7f0000000400)=0x0) io_cancel(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x24000000000000, r0, &(0x7f0000000600)="6cc135684e431a7b8e88fe08c76a77da2b3d1a1a0e6935a8f297629ed9ea36bf51646b90d014842213479f76be74624465274b49bc51f2f46aa80d87d9ff138d26edab4178d72d81b9b0d74098fb4daeae7a1f19f91c5d93c2b2248671eb36ff865e076b78d12f706cbedec05020", 0x6e, 0x3, 0x0, 0x0, r2}, &(0x7f0000000500)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={r3, 0x0, 0x30, 0x218, 0xcb400000}, &(0x7f0000000280)=0x18) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000440)) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r6 = dup2(r1, r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x20000, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000000)={0xd30c, 0x3}, 0x2) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x6000, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000540)={{0x2, 0x0, 0xb5b, 0x3, 0x5}}) 01:17:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 919.027377] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 919.078385] print_req_error: I/O error, dev loop0, sector 8 [ 919.084344] Buffer I/O error on dev loop0, logical block 1, lost async page write 01:17:30 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendfile64(r1, r1, &(0x7f0000000040), 0x101) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000280)={0xe37af6e1180197f, @multicast2, 0x4e21, 0x2, 'sh\x00', 0x20, 0x7, 0x73}, 0x2c) fcntl$getown(r2, 0x9) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xa00, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x0, 0x91b3, 0x2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vlan0\x00', 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc1600000000000000000000000000020000000000009ec21d2c0000000007000000000000000700000000000000020000000000000000000000000000000000000000000000000000000000000001000100070000000700000000000000810000000000000000060000000000000900000000000000000000000000000000000000000000000000000000000000"]) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x100000000) syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x9, 0x400000) ioctl(r0, 0x1, &(0x7f0000000200)="ef74b75b91c4b8b7090b7e02d3ddf702") sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0xfffffdef) fstatfs(r2, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) 01:17:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:30 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x48, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:30 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6c00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 919.500037] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x5, 0x3, 0x7f, 0x2, 0x40}) 01:17:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 919.724856] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = dup2(r1, r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast1, @remote}, &(0x7f0000000580)=0xc) sendto$packet(r3, &(0x7f00000002c0)="d5437ce20ff714def1eb9554a3b9b94a1ff181435cf39ba5e3e5b93cd2105cd92ad939988a766d1552bea10c74cd145340e5a547b810e2ef59e110deb13b503ae5352c2b284ce45713d739c7328ad95f8e2718f2632915f358d35d9545834159fc820bd2ebdff49244f5d19f276631a72660528581496ceae47e1cd19fe10a12131883bd362bb1e5a0a4022caf0e22b3c72b9647abe4f813f1f6aad8379e3a1e5508cad89bd899f6ba2480a0f1b957aa0195f0eeba5614dcdf13144bc5d265c74df73255a9aa18eba426", 0xca, 0x4000, &(0x7f00000005c0)={0x11, 0x19, r4, 0x1, 0x1000, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010, 0xffffffffffffffa9]}) 01:17:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:31 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000240)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xae08, &(0x7f0000000000)) 01:17:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:31 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x283}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 920.412699] print_req_error: I/O error, dev loop0, sector 0 [ 920.418543] print_req_error: I/O error, dev loop0, sector 0 01:17:31 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7e000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:31 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000080)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000140)={0x0, 0x0, 0x3e, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9", 0x4}) pipe(&(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000240)=0x0) tgkill(r4, r5, 0x2e) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000000c0)=r6) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 920.709265] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="9c12300a747d231209b8e881eeb810a6670bec4791061e97a8e8c0189594744fac5300e25265d43b54be78097ba2d42bd60d95d1c25e90467b9f47c78ddf9dad5b9a84cd1fcad034f5012e6b90ed7976af5a95e6ae43faaab147f2a21c1480536b05a502226937f5e2f690ae537bb5eaef5452ba1c46d312e026acd1c26365a87d1d912e04484d45fde2c47e604827f8ca007c54713ca67592c083667a9204850df6b69de3bbf6822bf387e2ff93858b070e324aa6cac1ec38d05f7f30551191ada1a37c799fd7b993248f5578a8843aba117fd323428f1d87e8dfc2185f2ff50600ccd70b1608f936650643f812d95f83ab3fde35ac81764469e84d86fe015753a4ce25955406e31c7833f5da77c1adf9810a43fc6b27fb4aa8f207d6f682e9423fa5e202b686be8961406b192b84630a0267ddc1657a1f012624405773d52ad480258075e8618d7a1c3b17fb4e04924852642deecc7857e3ac144994fffaab83c9af3787fb2390a26c42140572e8d65336a18ea19516a6ff34b71e5ae5fbc1d5123267bdbf4cab11b55cb659e999d7f535222de6f54771c08e46bf4158662af4d7cb5892506f0e60dfeff93ac0c9d1e04991aa2521b19715fec907ae11a89b3f7dfcd48a20fdfcd83fbc7f69f6c2380efdb400336af900c4c665e7fc2d15911c68a0d6c15c013f451438988c05e2af3e8d91c92c81cc2e6cc624b5223c61d7afdef9288e4332168589b40733ec835616780a95c286b5a0991262b46123cda817d94b7a7584ad8c9ab3c3cf2bf911a4c18706c5195cc585942434f1f1f42de736fd539543660b01fd3c990abef1904e461476d5852c55cb9fbc2f8641619ba1a4785cd9aa11df8110cc2d0201a5a661b66f11413da592cc786384d7a97ac294295418f3f476d16a65773d33c12f10d1ce6ae3f4c64d05c74b587dea95f697f571790242f7b6293c72eef9d7acbace16848abe799b8cfa215552810c0dba1434d6864bb4145c17938da5ac1c8363fb98ef9238191a5e33de2285117fe2ce9e3f55a02cb94981aff6e28944c62f2325df9198bc111368d294ffc97bb22a918aefa6f52b75852204f721f4a92348a7c868e5e129a0f24f306ae6e408e55c447e31f7baf48335993f48c52968da5ce65e87ba97ad6fbd05a234757975db2f5bef17a48d5e11dc2155fbeb9a672c04ca53b09375db8841c5dd506ae58a2009bf49e3f214390b2a8c107143d3b10afd020e9522afbb5944d20d292903d303f9848ee8a15b5213f7c4641b2eb8ce9e032eddcc969131d9596e95d2908ab795a6965ae552f3eb59dc27db7fe4867078389988df47d5a7f00e6f0e0de887388ed6a76651df34c24574bf1c9d8d9867877ff691676a7714ed4a2a0316c745c307017e25d1ab21f9f5d8660944947f3b6a697ba5947478cd12af91f270852848851e964e1ab75cf04e6183763273efc2b572f4626b3837a0509636ba19f5eafc5735f04307e6e2b6b3c1f04b09a9a26371db1f7c8d2facbb27ed2f99030f2b10640872777af05a6d6ecbbf44e748ad1102e1110b2ea536568b93a850c2c10f508a6966a2038f8c9d6acc73db62d91fecbd0d8d15605cfcaafc92df2caa83a688132ecbab266e6d2a31def15fa7ddedd3fffd0a284f70a8216b6fbc4af84062aac093301514cae92674406470920f2995768637e4a0f9c8c9708632f37b3b140db1d9d43a2d57a4ae5202edf11ed9168939337d091dc1f07600ea078b940012701002418bbbbb836b09631b94698d05788437114ff33b8e16bf43dd2e549d1269d1600070170e77bac5c9d8ce655e7e00f540ecacd3a575d58cdb5ca4cc85f5fbd070872839f184ebb4acadca48bea2077fbb3089329a1efcd011f4cf6e8ebb224640795fd22d5c6504a99d267c8d54f140882e510913ac6c81d69d5344b0c35f3c936b00b224d0abdbad97a072b76b32983231ce88e5b82d90bafcdec147e10449028bbe0d1a5080e095d128f2d3eb80e5f98c5265bd1cdce7378026d42152c9025bec22cddcceb9fd8dc5b83593a78eaf8be7e0a889a672683a1db4db77994a9e35d01bd7b533d4f4fc96a4374eec1e0bb3e8695cdd13fdf3240f171b22ac1a82bec266aa7813046dc44f22b94dceb1733ee00e214cec5dc478f9ee24f3459a1e1b91f7a1e726e8f3e71e5d12db0d8ba26ae9e0b8ecb567c835d7e5b7ec960dd69ca73e8b0867bb4a4bf7f93265ec7d7ac601ee93b0067235dfb0c3918d81aa08fee00134549314d4371b3963eeca258bc2e60dd34bfb6e14969b0daba5d5da0fd6d648096603fbce054dd0c6347278d230f5d739e9c420421268b0955cb4c267897539b56a9b6bee8006058864ab53df687f18eeb9d6786e0f2fd5381de4508957710743c02b8aa8a77c676e813355aa13661bc70333594ca6dd887a45e332f8152dea703527103edb15808efa6457572b4b3077d3602f66d4294028ddd7ff4dd65f0ed8ca0745dce484b6f508f5ab178de612d6539a7f742a0f47621bf78f44a353f4d80b72619d29e88cfd4e88bb21560031f06ab1976e25db999826e8bf6576a516375c9b0769b626f6bfcd75d04154a5c4007c7e68a551d68cfa44d5fc7fbc51bca9161c0fd551731951970506e11a4dd43dc36a5357b26570d775589b858c32fd1b4b05c138ed64006c2aa5ca1afc82aaee7f3c90d62aa91955bc2f43e959592ec8bed479cdf0dcb06e3863347d9813a8d3d4666c7de34f74944386f19359c752464a1fda210b35ab628c0f24d8b7a97b1aef2dad6146fac01732e16fe91614183f97af0f07e4464f40e5777c642ae4b5d02862b7ca3bbad6c770feae5ae2ea594bc85440c537fc1b14135ebcf9d929c5ccf4a7ef7c5c0b58d748d2f70604b0b3efa50c980c3ae345db0aaaa61a2b84fb7e7e7eda9cbbdec404979926f1f171d7e7243ea59405c912e88545f3734de001f44b5a8e2c79ce41186ce7f88f04ba503d1481ec2df5738fdac8f6493b60ca73089673e087cf3f980c963124227211efbb63ab5d3b760f784be401fa066f6cebead1b2cef60fd31ced02377b66c23b0eb2563a86dbce24dc7e4139aa0aea48eddfcf300a587db36e3df0e36c325e9a47fc67e83ba3981cb3625e6812b379669b9d42b83371bd18e15038661ffbae00b2e11debfbb2ae16c1f48aabb3a0deee4e0204b7f1216f94dcacf4a8df06da6499206b945138d140423b72c3de16d9fbd8132140c250f50d3539f864e7136ae06c85f77f5096f8c37ada0a9d7d0b6d1f77b722ff593eeac25d8abe3ca3bc4816f430a68fbdb6b13b6cbe68eff0523d22e9ab4854a479bd46f1f0bf8592cad25cb8ccfb903673b02fc34a0e17ff86761690a3d793f5173c3cd6abd1583aec8e55a37f7bf8110a705b3de79552527a22a402596dfb1a83160fa89f33a46671ab86a34785d81c841c0692ea62d379d00c863b8b31bee0d7b25b1e20543eb9665ba7f204fcdf065bcc97050543f7c4867f32d70a67bb40ed0908f329bbfaee9ee67782e6a203f121d5be840bf502811b7e58ee311daec2265cc86b7e24cd940df90db60cd77d85e1fe1f0314102826781982376d86d812348846d585c2645737de2b422232fc62ce86a070c1481d3c9fbce5fa5cb2a5e09691b9dbacbb7a86931f865f0f6631063d843a0243023aa1cda0fde61d935e5af8718803dcbd1649d33c966eb1008919dc76d95a054e7b7f6cf39728ad73eb0d927e09070b1d051e04372a0536b06fa02ffa8217e156787266708ad322fe5694cde8345fd580bb4344ecfa8c2698128f1f4c29f82de42717b351ac7aefa1140595535e1ffed15b627d8a5cc34f0c1eebd54b4235e7179d7a1931cfaf8878dd67d59b65a49c37671937986fee3bb6c4f6b6fc8154d82ab5005d0ad161539970f900f4f2ab8743716943568c0b446ca489904a3847adb7ced77f55e7ed863ce1d502956c5df3f77d5b8412607e9f56c27bab503ba934eed418d19e7ac984db666d1fe667f1a8286718ea9f6fc71847ae578eac53ae65586f1a65826e8863c7575376d260e7f7ebe2417b31391e52b2e4962b39b3c376a09b2d23ce14a990f1c2d90ee9ab125369368fe94d601d202cc4810556f8e312a99a118c23afe1283509ae8bf2580cd61ef935bb7c65bb7ab1bb0d460854f3c8c4710e8167d5a5d47a3c8c4d653e19b7b377f1e9100979757fd887b5c516a92d16d1e2d8941b009be30235271222ed073f5289096ed44f2b8189e7d731d84c39ee89e23cdb9ac95b36d0480dc6a420877c9026abe3ae19e72cb5f5160787dc0e5bbc4175ca92183c024c7b3beb69599bec7135332647ebe965423da29a9a72a0eabc03dbb6ea6be65a96af84b44364642edc73fe4820616b88cc8743de6b72e7abaa8396438ea1e5c609d4b45717d1d232ed7c1472387a5fe14c395196d575f720125a5afd69a7a52ac4181f710f3985daf7d30c4e1036dc8c549060af5a6d5a71a6d64ccf47bccfc50c5a13bf31a59f8d2f2e311283be485a3b4732c5f59c0e11bfc6d5b963824fd80cb47ece0c31b0df0e444a18d586a55d94180226c044683332e4e58038b6ed608d6a06becd22c63335d519029a51b00b843130a92a034380b2b8fa9342f64d821656cf0c90aecdf532cece3667c0616ec6f09537bed205af934477585e9dbbfb314b49752686ae6abe3accd28ee2255aee21c77d20507038668b6603d6d063c6cc18d8073e36a90804f39b4aa52621ab514dac06081b8f192f3a7dd0aa74fadc81cd7c3589f3b65814edda234fd30d89509a1eec9ec489a10a6cd2fc60bfb641b74fcebef3c96d747b966dba7c09fd67a66f695a1a43275af2c8718617951142fa7377c7a00295c2899076bb9760047d1c9b06666d96fe0ea894b09f9be7869faeb21a93acec88f0523bf80fd7b535336f38ee329282d14b0c31125ec265786837a302ae3814ae9ec31c31459d58e2b1e293c1ffa2e0cb6144c2f9c8e4c286bab90f2489b600223db56d35604fbda8098f5c5f24ff58733f03b335a4dc3c3b9dfa1356d35076857da17d5481d2d31d9383e6105f1f549d7f4c97cee7d22ac627901534ea6b2890c2c26ffa3b520152edada449b154772533ea40cf3613005cf2f35f13512690981f40db1e2cea91a0b0d298d40411974f739a8ab86c3c8bd659058b86874639b0fad73e9219e74924f97e59e9693094b42978574d5825626494162b23acbf7f7104cdf11192e7831ddeca3e51e33a88ad3f4520d4045c7c270e51d0f21d3840c9eb8bbd07e919fbc8d3d80048f008a40d9a4bac3961b67cdff94c8ea9fd6b185dc91f188023959ef2ccf998525c1b938554740fec79016d1eef0bf652f2a5416dfa8f75d57c872c1dc202ecd51926c511e1038a2698e39f95b4be0d2b6c55af3781834dcb0b2a819acfb6fd391718b9aab86186fe8c38bf34abfe89a5de82e687d354669a683883354a59c1bf5eedafa8427bbd033c31a08368447db0d95f216d5801b97636f6756e23e28896d2242b3f2c64b7337ccaa58dd1fb1b0efb8abf010dad665d464f61e6c47bcc09a6d8b77217853d4169ea4b10f111566028a0d99cb91d14a1f27e470eb5e1c3312cc84e98a13e4bc2bb06e25f9fab4673dbd7f0e0c22d1f4323d86a0577a870bd90e2c1e1d4585db967a8d03c7f22a7be3cb976198930b867b66ab4e38569b5e9c44193724f91909f98b8a7e1ed40715ff35fb1550fe5ebca83da05eb3b8a115cbf89a350168f401470640dcccb741c7f8206aeb5641dfb99fe4d18d3", 0x1000}], 0x1, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x4f0, 0x800}, 0x20000004) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000001c0)=r3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001440)={0x3, 0x0, &(0x7f0000000200)=""/85, &(0x7f0000001300)=""/207, &(0x7f0000001400)=""/34, 0x4}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000001280)={0x79, 0x0, [0x60000, 0x0, 0x40000011]}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 01:17:32 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x35000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 920.991579] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:32 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x600000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000100)={{0x100000000, 0x819}, 0xc}, 0x10) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xf000, 0x1, 0x1000], 0x0, 0xd, 0x4}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0)=0xab7, 0x4) 01:17:32 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x48, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x8) r2 = dup2(r0, r1) write$P9_RCREATE(r2, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x1}, 0xfffffffffffffff7}}, 0x18) 01:17:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7a000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf201000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000100)=r4) [ 921.631820] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x8) r2 = dup2(r0, r1) write$P9_RCREATE(r2, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x10, 0x0, 0x1}, 0xfffffffffffffff7}}, 0x18) 01:17:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xcfff, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200000, 0x0) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000080)={0x4, 0x100000001, 0x7, 0x10000, 0x32, 0x2}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 01:17:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 921.915722] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:33 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x3f00000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:33 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @rand_addr=0xf6}}}, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local}, 0xfdf7) 01:17:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 922.356228] print_req_error: I/O error, dev loop0, sector 0 [ 922.363319] print_req_error: I/O error, dev loop0, sector 0 01:17:33 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = dup2(r2, r1) ioctl$TIOCSCTTY(r3, 0x540e, 0x6f) 01:17:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x5000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:33 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x7ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="c58bcd08a462959e3379b0cc5655358e4524f5d0549679c2138322f96904ae117600c83fb73d35de0ae252e2ee8b2c5f9018e07c436f49a9f80c7ac522f2862e6a99c9b55fbb5fdeeb4a07436f2c65d1d141aed74186957bf51fc72e3392dc79f36bb35f0f513cad107f52d665ef1a908ce2acbd9f") ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000000b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="02004294736b8ff1178990cec3e9efe696fc2eb7a7190a80e835d58175e8af6f6b215b83c77d5bf64e5f0c16bfb9a6daa17b8f545fd984cc643b973cdb5557b49260411061743e5df5433e3f044b08e3ed7314c72ca05fde000611153063067f2100eb3989193b1718d767640e09deb22a57e7a73f59c516bac0562811bbef0db6628ad4247bdfc66720d88e87b24719b134ca015d677742f75303f22b37"], 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000240)=""/72) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 01:17:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 922.792979] print_req_error: I/O error, dev loop0, sector 0 01:17:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 923.215242] futex_atomic_op_inuser: 2 callbacks suppressed [ 923.215254] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:34 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0xfefdffff00000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:34 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5c00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:34 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x7ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="c58bcd08a462959e3379b0cc5655358e4524f5d0549679c2138322f96904ae117600c83fb73d35de0ae252e2ee8b2c5f9018e07c436f49a9f80c7ac522f2862e6a99c9b55fbb5fdeeb4a07436f2c65d1d141aed74186957bf51fc72e3392dc79f36bb35f0f513cad107f52d665ef1a908ce2acbd9f") ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000000b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="02004294736b8ff1178990cec3e9efe696fc2eb7a7190a80e835d58175e8af6f6b215b83c77d5bf64e5f0c16bfb9a6daa17b8f545fd984cc643b973cdb5557b49260411061743e5df5433e3f044b08e3ed7314c72ca05fde000611153063067f2100eb3989193b1718d767640e09deb22a57e7a73f59c516bac0562811bbef0db6628ad4247bdfc66720d88e87b24719b134ca015d677742f75303f22b37"], 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000240)=""/72) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) [ 923.288095] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) socket$inet6_dccp(0xa, 0x6, 0x0) [ 923.458703] print_req_error: I/O error, dev loop0, sector 72 [ 923.464685] Buffer I/O error on dev loop0, logical block 9, lost async page write 01:17:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:34 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x46000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6000000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:35 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x8302000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf201, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:35 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3f00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:35 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x7ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="c58bcd08a462959e3379b0cc5655358e4524f5d0549679c2138322f96904ae117600c83fb73d35de0ae252e2ee8b2c5f9018e07c436f49a9f80c7ac522f2862e6a99c9b55fbb5fdeeb4a07436f2c65d1d141aed74186957bf51fc72e3392dc79f36bb35f0f513cad107f52d665ef1a908ce2acbd9f") ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000000b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="02004294736b8ff1178990cec3e9efe696fc2eb7a7190a80e835d58175e8af6f6b215b83c77d5bf64e5f0c16bfb9a6daa17b8f545fd984cc643b973cdb5557b49260411061743e5df5433e3f044b08e3ed7314c72ca05fde000611153063067f2100eb3989193b1718d767640e09deb22a57e7a73f59c516bac0562811bbef0db6628ad4247bdfc66720d88e87b24719b134ca015d677742f75303f22b37"], 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000240)=""/72) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 01:17:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x10) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001500)={0x6, 0x0, [{0x1, 0x41, &(0x7f0000000080)=""/65}, {0x7000, 0xf3, &(0x7f0000000200)=""/243}, {0xf000, 0x1000, &(0x7f0000000300)=""/4096}, {0xf000, 0x4c, &(0x7f0000001300)=""/76}, {0xd000, 0x99, &(0x7f0000001380)=""/153}, {0x14005, 0x9b, &(0x7f0000001440)=""/155}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 924.183478] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 924.223520] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 924.368306] print_req_error: I/O error, dev loop0, sector 136 [ 924.374677] Buffer I/O error on dev loop0, logical block 17, lost async page write 01:17:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:35 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x63000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x700, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001240)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000001340)=0xe8) getresuid(&(0x7f0000001380), &(0x7f00000013c0)=0x0, &(0x7f0000001400)=0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000007c0)={{0x7e, @rand_addr=0xd000000000000000, 0x4e24, 0x0, 'lblc\x00', 0x1, 0x10001, 0x30}, {@multicast1, 0x4e24, 0x2000, 0x6ce8, 0x4, 0x4}}, 0x44) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@mcast2, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x1, 0xa, 0x80, 0x80, 0x11, r3, r4}, {0x5, 0x10001, 0x7, 0x3, 0x6, 0x1ff, 0x7fff, 0x6}, {0x60, 0x5, 0x0, 0x7f}, 0x7, 0x6e6bbd, 0x1, 0x1, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@remote, 0x0, 0x5, 0x0, 0x8, 0x8, 0x1000, 0xff}}, 0xe8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={r9, r5, r10}, 0xc) openat$cgroup(r8, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) [ 924.924073] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:36 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x100000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xfbffffff, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:36 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x7ff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="c58bcd08a462959e3379b0cc5655358e4524f5d0549679c2138322f96904ae117600c83fb73d35de0ae252e2ee8b2c5f9018e07c436f49a9f80c7ac522f2862e6a99c9b55fbb5fdeeb4a07436f2c65d1d141aed74186957bf51fc72e3392dc79f36bb35f0f513cad107f52d665ef1a908ce2acbd9f") ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2000000000b) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="02004294736b8ff1178990cec3e9efe696fc2eb7a7190a80e835d58175e8af6f6b215b83c77d5bf64e5f0c16bfb9a6daa17b8f545fd984cc643b973cdb5557b49260411061743e5df5433e3f044b08e3ed7314c72ca05fde000611153063067f2100eb3989193b1718d767640e09deb22a57e7a73f59c516bac0562811bbef0db6628ad4247bdfc66720d88e87b24719b134ca015d677742f75303f22b37"], 0x1) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000240)=""/72) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) 01:17:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'veth0\x00', 0x7f}) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000200)=0xc) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) fstatfs(r1, &(0x7f0000000080)=""/100) write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x2, {0x0, 0x4}}, 0x14) [ 925.073520] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xe00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000000300)={0x1204, 0x38, 0x4, 0x70bd2d, 0x25dfdbfe, {0x8}, [@generic="0f290113eb02fc0e9819f25905f3563cb25a14d7febce855ee29cebdfd321a050b88a2a8e315a9c28d42293205132fbe6d", @nested={0x10d4, 0x67, [@generic="838e0ac3b810a1a94afb110edc2a1bceb60e637d998c884d876b6539faf29c4413c6aa24b641ae786a0a2eab20677d7f44a4477d11c68805abd0d925b2afcbf2405ee0f85b4c77e624c63f109daf08c6845e7e1afd3b0e418164a33b83542ce0f9d2855b1ebf140216e48aada3b7d7ccf1c48ec4ed63fcbd7b3dbee9a1870361e0f170390a80185da50e8946281745db4e3deecebb04a2a09ec69459e718eb30491e0669b17d36f3956663ab4c3938854cd7a467480c776bc2", @typed={0x8, 0x3d, @ipv4=@multicast2}, @typed={0xc, 0xc, @u64=0x5}, @generic="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"]}, @generic="3399bbb399554cc3d5c9b04dd15bd51594c7ecb8ce1a932eae65c4b9e383b97962236100ef0fda53168558ef0e3b7ed4d833a33b717c3f9b6243980e722d547bfc67f8e1bcd7956af80e629d1218b8591d1eaac83bd48aa8bb2470dbc133883d050cc2963c4437a86f5d0490d29c0c183cdad0226ba5122d603dfad2", @typed={0x8, 0x4d, @uid=r2}, @generic="defc44b25cfc201d5303d6fbf66f256f6ce4d9c8a98f8ca77c13e2497829915fc0b93ee4e701ecfda1991ae53a4f0867a7e3ac077dddfadc8ff3d23fd31829fc14fad2e05059c75942b55aaf714c890d40f513f86365e719f0d674f96825f59c49345f25aa4b28"]}, 0x1204}, 0x1, 0x0, 0x0, 0x20000040}, 0x8810) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0xfffffffffffffffe}, 0x28, 0x1) 01:17:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4800, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x103ff, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0x10000) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000080)) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f00000000c0)={0x2, 0x6}, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 01:17:37 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:37 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f0000000080)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) getrlimit(0x0, &(0x7f0000000100)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0x6, "8d2805d49c951919d81721a34b52df198cc1629f5ab238aa12c81c4a7e949580", 0x1, 0x1}) 01:17:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x109200, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x21, @broadcast, 0x4e21, 0x1, 'lblcr\x00', 0x1, 0x1000, 0x4b}, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d03, 0xfffffffffffffffe, 0x40000011, 0xfffffffffffffffd]}) [ 925.910915] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:37 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'erspan0\x00'}) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x100) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) dup2(r1, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) 01:17:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 926.421001] print_req_error: I/O error, dev loop0, sector 10408 [ 926.444338] print_req_error: I/O error, dev loop0, sector 0 [ 926.450440] print_req_error: I/O error, dev loop0, sector 12312 01:17:37 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1100, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwrite64(r0, &(0x7f0000000200)="5480d75c6ede980af652e2a99416e76669c64a64f0b8d76eb1a20e8eccfec0656ea3d86ded82ac1029dbc4be1ab7a26319d495a15ee5844999394bc8231ab1ead91fdbdd9c031fefe0c0ffbc31039816452fca7d22d1bfd78ecd386c53ec8a7fc43094577a2f2617c440d07c7f931ad46dc971eb17a4637c6d37e8c8e7caba7d1b9498888da65347ef13b6e84b067a521ac400ba724ee1c3e2d73a95aa9bf4150293f27436c6b0ded39e18b9eb346726e3f07154a85e097797f8f445f87d578f6f035c750cddf49c5b05e5df7dde5246f3c821cb", 0xd4, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x2) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000080)={0x3, 0x5, 0x8001, 0x0, 0x4, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3601, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4c00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:37 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x83020000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:37 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) socket$inet6_udp(0xa, 0x2, 0x0) [ 926.767577] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 926.807479] print_req_error: I/O error, dev loop0, sector 0 01:17:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 926.958435] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x2, 0x100000000000000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) 01:17:38 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xf0ffffffffffffff, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x2, 0x7ff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)='&-\x00', 0x3, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x2000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20200, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x2, 0x100000000000000, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) 01:17:38 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4c000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:38 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x6000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)={0x5, 0x0, [{}, {}, {}, {}, {}]}) 01:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf503000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:38 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x600, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x12000, 0x0) fcntl$getown(r0, 0x9) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000300)=""/29, &(0x7f0000000340)=0x1d) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x5, 0x0, 0xfc51, 0x40}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0xdc2c, 0x38}, 0x8) write$nbd(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xdd) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10341, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f0000000040)="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"}, 0x10) 01:17:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x9c, "c8a279c7cd288e2267be66bc3b902d8221e54547a298d94cdc6749b404257d5e10235458e6d1da0fdddc7c0fbbbf1106f7ae200808c260c0c630be90c8012eb86e769b04db8e29076713752f5ab5c22608240980150af7e7eb688dddd7a69d16e4b177c5fc89edac6315cec235251e659f29fbe89002ea5b0fedb744c976cba1c30aaadca511dc6db00d219b4aa3ce52f64e09a337c5828ba25b70ff"}, &(0x7f0000000000)=0xa4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x28}, 0x8) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:39 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2fc, 0x10400) pwrite64(r0, &(0x7f0000000040)="d1eb343dbfda99e2e8ec2e9a9136625f6ef4777dd0b45d8be4f64ae45e410148cd01ebd5b2b06711298be3baf66f2dda5fba3b29", 0x34, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r1, 0x7fffffffffd, 0x0) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/240}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/62}], 0x1) [ 927.806237] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x500000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:39 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x3f000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x10001, 0xd5}) [ 928.431055] futex_atomic_op_inuser: 1 callbacks suppressed [ 928.431066] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 928.689840] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 928.707471] print_req_error: I/O error, dev loop0, sector 0 [ 928.708762] print_req_error: I/O error, dev loop0, sector 136 [ 928.719227] Buffer I/O error on dev loop0, logical block 17, lost async page write 01:17:40 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1e00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:40 executing program 2: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x10}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x7, 0xfa, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x100}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r3, 0x4}, 0x8) ioctl$KDENABIO(r1, 0x4b36) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000001c0)={0x7, 0x100000001, 0xfd07}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r4, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x2000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\a\x00'}) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd4ed, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20408}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="85c4978cfddb9fd9c25c036dae36ec10c43b9416d33d5c9ad10cdd1057f45727a2f310ad4604e373444b863f2034f3e6f08560b2223f5acf70eacf94d85474cd9a1d63916d0eb0f6fa0a6feacf1b8fcddfc2ea2ccee972c11fe35ce6eeafe6a080c48b2e783059e64b98e138ff1758ecdc997dfb97045b8081f6b2140f964008c94eb688e1c504343ce3c3cc6b5c3535dec9188fae4b991b39874d76a8a4f98a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) 01:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 929.266018] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:40 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x3f00}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x00', 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1df28, 0x3, [0x7ff, 0x100000001, 0x80]}, &(0x7f0000000200)=0xe) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r4, 0x3, 0xb1dc}, &(0x7f0000000280)=0x10) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0xa19, 0x6, 0x40000010]}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x101fe, 0x0, &(0x7f0000ffb000/0x1000)=nil}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000002c0)=0x100000001, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x202800, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) [ 929.431637] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 929.762142] device lo entered promiscuous mode [ 929.878366] print_req_error: I/O error, dev loop0, sector 16 [ 929.884344] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 929.892053] print_req_error: I/O error, dev loop0, sector 8832 [ 929.902412] Buffer I/O error on dev loop0, logical block 1104, lost async page write 01:17:41 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x9f00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 930.009970] device lo left promiscuous mode [ 930.220404] print_req_error: I/O error, dev loop0, sector 640 [ 930.226458] Buffer I/O error on dev loop0, logical block 80, lost async page write 01:17:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet(0x2, 0x200000002, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) 01:17:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7a, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:17:41 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x18, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:41 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x83020000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 930.647047] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:41 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x104, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00', 0xffffffffffffffff, 0x600000000000000}, &(0x7f0000001fee)="520972757374e363257367725665783a4465", 0x0) [ 930.717379] print_req_error: I/O error, dev loop0, sector 0 01:17:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x6, 0x1}, {0x1000, 0xffffffffffff0565}], r3}, 0x194, 0x1) 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:42 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x36, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 930.839624] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x9) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x200000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) poll(&(0x7f0000000000)=[{r1, 0xce}, {r0, 0x80}, {r2, 0x400}, {r1, 0x204}, {r1, 0x428}, {r0, 0x10}, {r0, 0x208}], 0x7, 0x2) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000000000050000000000000000000000070000000400000000000000000000000000000000000000000000000000000003000000000000000000000000000000ff0300003e09000008000000adfe282d0cc3d2f5000000000000000000000000362e274eda1cea870c0ae45b64272d21460e135dfa38027d8621c4e5161b42d2"]) 01:17:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000004c0)={0x2, &(0x7f0000000480)=[{}, {}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x70, 0x6, 0x0, 0xa2e, 0x3, 0x0, 0x27, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x8, 0xca3, 0x0, 0x6, 0x5, 0x1, 0x0, 0x9, 0x4af, 0x200, 0x6f, 0x1, 0x80000001, 0x0, 0x0, 0x8, 0x6, 0x0, 0x100000001, 0x9d2, 0x9, 0x0, 0xff, 0x100000001, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xffff}, 0x2, 0x8, 0xffff, 0x1, 0x1ff, 0x7, 0xb8d4}, r0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x15, 0xcb, &(0x7f0000000300)="a496f9708f84c18ffc76c0cde7ee0be5b82babf725ac80a4e8366ceb1db9d5d873b99e24ff7dc972e3a54ab319bc3afd668dc966f1713952c35db64b1b7ccf1195fde10630bbb99f7b518b2ca229dfbcde2ecdb4e4eff314a6180121e1fe28d3c5f23db3a681856ace26fac676d6b897c6f8d4b6b0af6990958b0393fd0746189a3c287c4516a4445b4c01db8764c1520a8d649166d10913f9ad73e64e8c09d96dde8726383b496585e5b0d0204e7accf22cc3beed47c7c1c8c9b605865ac8de24133b803f1f14c65a3c26"}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=""/110, 0x6e}}, 0x10) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) r3 = request_key(&(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)='lo\x00', 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x200000) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 01:17:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xffffff7f00000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 931.415784] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:17:42 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x6000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x50) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x0, 0xffff, 0x3ff, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], 0x89) 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 931.566317] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x246, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 931.745785] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 931.887617] print_req_error: I/O error, dev loop0, sector 10496 [ 931.893810] Buffer I/O error on dev loop0, logical block 1312, lost async page write [ 931.901783] print_req_error: I/O error, dev loop0, sector 16 [ 931.907882] Buffer I/O error on dev loop0, logical block 2, lost async page write 01:17:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x100000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x200000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000080)={0x0, 0x2, 0x3}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:43 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000004c0)={0x2, &(0x7f0000000480)=[{}, {}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x70, 0x6, 0x0, 0xa2e, 0x3, 0x0, 0x27, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x8, 0xca3, 0x0, 0x6, 0x5, 0x1, 0x0, 0x9, 0x4af, 0x200, 0x6f, 0x1, 0x80000001, 0x0, 0x0, 0x8, 0x6, 0x0, 0x100000001, 0x9d2, 0x9, 0x0, 0xff, 0x100000001, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xffff}, 0x2, 0x8, 0xffff, 0x1, 0x1ff, 0x7, 0xb8d4}, r0, 0xb, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000400)={0x15, 0xcb, &(0x7f0000000300)="a496f9708f84c18ffc76c0cde7ee0be5b82babf725ac80a4e8366ceb1db9d5d873b99e24ff7dc972e3a54ab319bc3afd668dc966f1713952c35db64b1b7ccf1195fde10630bbb99f7b518b2ca229dfbcde2ecdb4e4eff314a6180121e1fe28d3c5f23db3a681856ace26fac676d6b897c6f8d4b6b0af6990958b0393fd0746189a3c287c4516a4445b4c01db8764c1520a8d649166d10913f9ad73e64e8c09d96dde8726383b496585e5b0d0204e7accf22cc3beed47c7c1c8c9b605865ac8de24133b803f1f14c65a3c26"}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x10, &(0x7f0000000680)={&(0x7f0000000600)=""/110, 0x6e}}, 0x10) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) r3 = request_key(&(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)='lo\x00', 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x200000) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) [ 932.238781] print_req_error: I/O error, dev loop0, sector 4608 [ 932.371529] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:43 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x600}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x33000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000200)={0xc, 0xd4, "34cd76a87f9241018bd784ee5a771b1710d0dc86d1fe78f0fa5536b25f69119c3e278f6770a4fbbd862ca9f9283278ea7fba5b78fa1c0bed2b6ddc55a0e89479d638550d0b2387fe3c482787aa05fdf8385e17d5323d9cd8abac3af357ef57be3c610a0af6dc18bbb5dff0ef134eb149f589107743ea26dd5c45ac195731a756443643cf1d6e2f79ee71f61f7b39eaa5597b042e46c5d3567893f9821a790e53d3993413ba51e2f4b8b4b7a5e30da30de7297694bb61235efb40f72946cc07744cf4b94a8968e58cd5d27de6c586330bc243b865"}, 0xda) 01:17:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 932.576423] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4700, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f00000013c0)='./file0\x00', 0x102) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000001400)={0x0, 0xb1, "03e71d95c004ee62cab79d99ed55a1b0b2d5a8f191b261572dd9da0e27536a36bb1bc69028ee34c2c02555c7be4848f833b6b756607df24f7355a352cbadb7f5328972a4b15476406082e7503b95f4c7e2ba8929d608a0cb2079104b58ca4b28f0b05a42435543bb0114ccb43984cb6d963c67391aba4770983fc54034c6c4385c61c44bcbb11a6d689c761cfde68a9854c01795cd54fdee21ea0d9fe1a823df8fac6a2c298ec30108d220c3e4019f0392"}, &(0x7f00000014c0)=0xb9) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001500)=@sack_info={r4, 0xffffffff, 0x7fff}, 0xc) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4c000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x1, 0x80000) 01:17:44 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 01:17:44 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x1000, 0x104000}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c4c17c53f066baf80cb832d08b83ef66bafc0c66b8000066ef480fc71bc74424002a010000c744240200380000ff1c2466b8ec008ed026363e2e360fc72dd8f787b63646d03d00800000f344235686490fc7584648b8f32f0000000000000f23c00f21f835030001000f23f8", 0x6c}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c300042b5abd3a915edee00"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0xf9) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:17:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4c00000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 933.667762] futex_atomic_op_inuser: 2 callbacks suppressed [ 933.673619] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 933.742038] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 933.803173] print_req_error: I/O error, dev loop0, sector 0 [ 933.805076] print_req_error: I/O error, dev loop0, sector 10368 [ 933.815440] Buffer I/O error on dev loop0, logical block 1296, lost async page write 01:17:45 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6100, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)=0x100000001) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:45 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{}, {0x0}, {}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000500)={r1, 0x1}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000400)={0x15, 0x67, &(0x7f0000000300)="a496f9708f84c18ffc76c0cde7ee0be5b82babf725ac80a4e8366ceb1db9d5d873b99e24ff7dc972e3a54ab319bc3afd668dc966f1713952c35db64b1b7ccf1195fde10630bbb99f7b518b2ca229dfbcde2ecdb4e4eff314a6180121e1fe28d3c5f23db3a68185"}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000140)={0x3, 0x20166f1c14544902, &(0x7f0000000900)="a7b19a2cc4b2458b93fea2a9a37c509b97b7df85057baff2a9f0955320133aa1960ae7ae11e51d0f313aeaa111ca59cf7a9e4be05408a655c1e4e0d7d6890d9db76e28fe15ac8cd7c75ddc446e36f1387dc4119967e1ec2e3f1462feceb2d6d2b3683ffb5e74e5609ac9e5c81c1bf2cfa31e92acc25e34dde4443349e7b41030c76c3e8aaf15057566fcc85f68b71a728c0dddcd3286ac", &(0x7f0000000080)="6ce2dcfb622ea100884e48da23fe7a09ee1a44c287bfc032f14fbd6b7ddc745e251f05eda269c4dc312dd85bf99544ee2476225388d1dacfba0574d2c349a1e928cf8962ab48dcfe773ae0ac", 0x97, 0x4c}) recvfrom$inet6(r0, &(0x7f0000000700)=""/195, 0xc3, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) r4 = request_key(&(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)='lo\x00', 0xfffffffffffffffb) keyctl$setperm(0x5, r4, 0x200000) timerfd_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xa6a, 0x2000) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000080)="76000000005f0c7b04ed65615c00") r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000200)={'yam0\x00', {0x2, 0x4e24, @loopback}}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f00000002c0)={0x3, r3}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000100)=0x7) openat(r3, &(0x7f0000000280)='./file0\x00', 0x90000, 0x9) [ 934.039447] print_req_error: I/O error, dev loop0, sector 0 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:45 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7400000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:45 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5c, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x4b564d03, 0x0, 0x40000010]}) 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x60, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, &(0x7f0000000080), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18c454, [{{{0x11, 0x0, 0x0, "6e2a30456b886bc2165b41fe6900", 'yam0\x00', 'yam0\x00', 'veth1_t/_bond\x00', @link_local, [], @link_local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x178) [ 934.524932] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 934.588982] Buffer I/O error on dev loop0, logical block 57, lost async page write [ 934.637491] kernel msg: ebtables bug: please report to author: Wrong len argument [ 934.702766] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:46 executing program 2: socketpair$unix(0x1, 0x202000000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2000000000000003, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1, &(0x7f00000002c0)}, 0x0) 01:17:46 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) [ 934.910978] netlink: 15 bytes leftover after parsing attributes in process `syz-executor2'. [ 934.982435] print_req_error: 1 callbacks suppressed [ 934.982444] print_req_error: I/O error, dev loop0, sector 1696 [ 935.031556] print_req_error: I/O error, dev loop0, sector 2720 01:17:46 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:46 executing program 0: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141048, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f00000000c0)="56b8d0de9ad9", 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 01:17:46 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af00, &(0x7f0000f1dff8)) 01:17:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7a00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:46 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2500, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000000603140920000000000000000ff0200000000000000000000000000010000907800000000fe800000000000000000000000000000000000000000000000000000"], 0x1) 01:17:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 935.635036] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 935.731638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.760114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 935.847608] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 935.896917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:17:47 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x5, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067f4615854287755f700000000000000000000000000000c99240015"], 0x1}}, 0x0) 01:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 936.456596] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 936.602122] print_req_error: I/O error, dev loop0, sector 264 [ 936.608290] Buffer I/O error on dev loop0, logical block 33, lost async page write [ 936.617143] print_req_error: I/O error, dev loop0, sector 0 [ 936.640549] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:47 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:47 executing program 2: setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000040)}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/180, 0x20000234}], 0x1) dup3(r2, r1, 0x0) 01:17:47 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000380)={0x2600, 0x4004400}) 01:17:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:48 executing program 2: r0 = eventfd(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getsig(0x4202, r1, 0x7, &(0x7f0000000080)) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) 01:17:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xa00000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 937.052160] print_req_error: I/O error, dev loop0, sector 0 01:17:48 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:48 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3de, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 01:17:48 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0f"]}) 01:17:48 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7600, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x206, 0x0, 0x80, 0x6, 0x3c1, 0x7}, &(0x7f0000000340)=0x20) write(r0, &(0x7f0000000400)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000600)=0x5, 0x4) 01:17:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="0000000000b21dbe0b8e091bebc902126d888407c53b84edf32a2d34bf2576f0a900") r1 = openat$cgroup_ro(r0, &(0x7f0000000140)="6d656d0001792f060000000000000016d442abe3fa72656e7400", 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x400000) [ 937.364127] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 937.429553] print_req_error: I/O error, dev loop0, sector 0 01:17:48 executing program 2: keyctl$set_reqkey_keyring(0xe, 0x1) add_key(&(0x7f0000000880)="6b657972696e670036f9126c12054f5c0e18c6522573dd79f1a0a3a60957d6c729ad856cd8f0df9c04d18e57904b1c05209dee12f5ccc12d98a70037673436610faac88bcf9681918789c2ad473665984b17868d9c5e90813e9ec1f73fdebf5638f9c01f8821f1f78ebac984e3852ee10000000000000000000000", &(0x7f0000000840)={'syz'}, &(0x7f00000002c0), 0x1d3, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="d13ff3d776", 0x0) [ 937.553509] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:48 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x19, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x2000000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:49 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x283}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:49 executing program 2: sendmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000700)}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 01:17:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:49 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1}) 01:17:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="c4c17c53f066baf80cb832d08b83ef66bafc0c66b8000066ef480fc71bc74424002a010000c744240200380000ff1c2466b8ec008ed026363e2e360fc72dd8f787b63646d03d00800000f344235686490fc7584648b8f32f0000000000000f23c00f21f835030001000f23f8", 0x6c}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c300042b5abd3a915edee00"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:17:49 executing program 2: r0 = open(&(0x7f0000000100)='./bus\x00', 0x141048, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f00000000c0)="56b8d0de9ad9", 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="80", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) fchownat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x9) 01:17:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 938.743584] print_req_error: I/O error, dev loop0, sector 0 [ 938.749532] print_req_error: I/O error, dev loop0, sector 0 01:17:50 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6c000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='\b']}) 01:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:50 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x80000000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x100000001) 01:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 939.057005] futex_atomic_op_inuser: 2 callbacks suppressed [ 939.057016] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:50 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000780)={@empty, @dev, @dev}, &(0x7f00000007c0)=0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) write$binfmt_misc(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="000000808e9478f65b2babac217968be4d00f9b8d6bfa96383d2e65d1e6055f4977f3c49fd034b72de57cff0bebef5159e"], 0x31) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000003c0)={0x4, 0x3, [{0x3, 0x0, 0x4}, {0x10001, 0x0, 0x5}, {0x9, 0x0, 0x4}, {0x3, 0x0, 0x6}]}) io_setup(0x103, &(0x7f0000000740)=0x0) io_submit(r4, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4, 0x0, 0x730000000000}]) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={r5}, 0xffffff69) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80000) write$UHID_INPUT(r7, &(0x7f0000001580)={0x8, "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", 0x1000}, 0x1006) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x5c, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xc8d9}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) fsetxattr(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000540)='IPVS\x00', 0x5, 0x0) timer_create(0x0, &(0x7f0000000100), &(0x7f0000044000)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000800)=0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000680)=""/173) [ 939.104523] print_req_error: I/O error, dev loop0, sector 0 [ 939.169555] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:50 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x0, 0xa2e, 0x3, 0x0, 0x0, 0x2a5045d1e29e6aa, 0x2, 0x1, 0x1, 0x6d, 0x1, 0x0, 0xca3, 0x0, 0x6, 0x5, 0x0, 0x0, 0x9, 0x4af, 0x200, 0x6f, 0x1, 0x0, 0x60a, 0x5c37, 0x8, 0x6, 0x0, 0x0, 0x9d2, 0x9, 0x4, 0xff, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0xffff}, 0x2, 0x0, 0xffff, 0x1, 0x1ff, 0x7, 0xb8d4}, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000500)={0x0, 0x1}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000400)={0x15, 0xce, &(0x7f0000000300)="a496f9708f84c18ffc76c0cde7ee0be5b82babf725ac80a4e8366ceb1db9d5d873b99e24ff7dc972e3a54ab319bc3afd668dc966f1713952c35db64b1b7ccf1195fde10630bbb99f7b518b2ca229dfbcde2ecdb4e4eff314a6180121e1fe28d3c5f23db3a681856ace26fac676d6b897c6f8d4b6b0af6990958b0393fd0746189a3c287c4516a4445b4c01db8764c1520a8d649166d10913f9ad73e64e8c09d96dde8726383b496585e5b0d0204e7accf22cc3beed47c7c1c8c9b605865ac8de24133b803f1f14c65a3c260b6bba"}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000140)={0x3, 0x20166f1c14544902, &(0x7f0000000900), &(0x7f0000000080)="6ce2dcfb622ea100884e48da23fe7a09ee1a44c287bfc032f14fbd6b7ddc745e251f05eda269c4dc312dd85bf99544ee2476225388", 0x0, 0x35}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000700)=""/195, 0xc3, 0x2, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000280)=0x2, 0x4) r3 = request_key(&(0x7f0000000840)='id_legacy\x00', &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)='lo\x00', 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x200000) timerfd_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 01:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:50 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3e9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) socket$bt_bnep(0x1f, 0x3, 0x4) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202357994f66e76f4d0fe2208456ebfa69074c994144c95c4375644bd1747e34c127d80575d10a599f851dc7ad26f3fa377c0a53cc7be2512b7493bf864ecf3f13"], 0x4b) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @rand_addr}, &(0x7f0000000100)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000200), 0x4) [ 939.637450] print_req_error: I/O error, dev loop0, sector 256 01:17:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x48000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:51 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 01:17:51 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) getpeername$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000300)=0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@dev, @local, 0x0}, &(0x7f00000001c0)=0xc) connect$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x400, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) write$P9_RLERRORu(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="67bf31420e000044503ab3b7aabd"], 0xe) r3 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x50, &(0x7f0000000400)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r3, r0, 0x0, 0x5, &(0x7f0000000340)='ppp0\x00', r4}, 0x30) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESHEX=0x0, @ANYRES64=r0, @ANYPTR64, @ANYRESDEC=r0]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000600)={'filter\x00', 0x0, 0x3, 0xbc, [], 0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000540)=""/188}, &(0x7f0000000680)=0x78) sendfile(r1, r1, &(0x7f0000000140)=0x3000, 0x8800000) 01:17:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1ac) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) 01:17:51 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x60000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0xffffffffffffffe0, 0xeb1d, 0x206, 0x0, 0x80, 0x6, 0x3c1, 0x7}, &(0x7f0000000340)=0x20) write(r0, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) 01:17:51 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7fffffffffffffff, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5030000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 940.273682] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 940.409519] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x60, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:51 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1600000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:51 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x1000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:51 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)={{0xcc}, "7ed448b5c16dad49a42c72c7fb70559faa4afd39942bdc1043ea0ea2bb4d23d1096d4e8e16739c4c"}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x0, 0x1fb0}) keyctl$set_reqkey_keyring(0xe, 0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x400000000000038, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x0) 01:17:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 940.880275] print_req_error: I/O error, dev loop0, sector 1696 [ 940.918014] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:52 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3e000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:52 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)={{0xcc}, "7ed448b5c16dad49a42c72c7fb70559faa4afd39942bdc1043ea0ea2bb4d23d1096d4e8e16739c4c"}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x0, 0x1fb0}) keyctl$set_reqkey_keyring(0xe, 0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x400000000000038, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x0) [ 941.126515] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:52 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000d00)={{0xcc}, "7ed448b5c16dad49a42c72c7fb70559faa4afd39942bdc1043ea0ea2bb4d23d1096d4e8e16739c4c"}, 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000180)={0x0, 0x1fb0}) keyctl$set_reqkey_keyring(0xe, 0x8001) sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x400000000000038, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x0) 01:17:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:52 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x17, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x100000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0) [ 941.586988] print_req_error: I/O error, dev loop0, sector 512 [ 941.593008] Buffer I/O error on dev loop0, logical block 64, lost async page write 01:17:52 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:52 executing program 0: 01:17:52 executing program 2: 01:17:52 executing program 0: 01:17:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:52 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x100000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:52 executing program 2: 01:17:53 executing program 2: [ 941.875203] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 941.930558] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 941.957243] print_req_error: I/O error, dev loop0, sector 2560 01:17:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xffffff7f, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:53 executing program 0: 01:17:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:53 executing program 2: 01:17:53 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1c000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:53 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x8}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:53 executing program 2: 01:17:53 executing program 0: 01:17:53 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7700, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:53 executing program 2: 01:17:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 942.498535] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 942.637323] print_req_error: I/O error, dev loop0, sector 512 [ 942.643462] Buffer I/O error on dev loop0, logical block 64, lost async page write [ 942.698615] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:54 executing program 0: 01:17:54 executing program 2: 01:17:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:54 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x74, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 943.007609] print_req_error: I/O error, dev loop0, sector 0 01:17:54 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x64}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:54 executing program 2: 01:17:54 executing program 0: 01:17:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:54 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2d00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:54 executing program 0: 01:17:54 executing program 2: 01:17:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6c, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:54 executing program 0: 01:17:54 executing program 2: 01:17:54 executing program 2: 01:17:55 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:55 executing program 0: 01:17:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:55 executing program 2: [ 944.155703] print_req_error: I/O error, dev loop0, sector 10952 [ 944.161864] Buffer I/O error on dev loop0, logical block 1369, lost async page write [ 944.170610] print_req_error: I/O error, dev loop0, sector 40 01:17:55 executing program 0: 01:17:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x500, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:55 executing program 2: 01:17:55 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:55 executing program 2: 01:17:55 executing program 0: 01:17:55 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x3f000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:55 executing program 2: 01:17:55 executing program 0: 01:17:55 executing program 2: [ 944.616894] futex_atomic_op_inuser: 4 callbacks suppressed [ 944.616906] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:55 executing program 0: [ 944.765498] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7400, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 945.144107] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 945.237095] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 945.403337] print_req_error: I/O error, dev loop0, sector 272 [ 945.409321] Buffer I/O error on dev loop0, logical block 34, lost async page write [ 945.417763] print_req_error: I/O error, dev loop0, sector 11784 [ 945.423928] Buffer I/O error on dev loop0, logical block 1473, lost async page write [ 945.434944] print_req_error: I/O error, dev loop0, sector 0 01:17:56 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x20000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:56 executing program 2: 01:17:56 executing program 0: 01:17:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:56 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x3f00}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x300, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:56 executing program 0: 01:17:56 executing program 2: 01:17:56 executing program 2: 01:17:56 executing program 0: 01:17:56 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1f000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:57 executing program 2: [ 945.827518] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:57 executing program 0: 01:17:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:57 executing program 2: [ 946.136061] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:57 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x8302000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:57 executing program 0: 01:17:57 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6d00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:57 executing program 2: 01:17:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x126, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x68, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:57 executing program 0: 01:17:57 executing program 2: 01:17:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x7) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) 01:17:57 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 01:17:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000600)) [ 946.817284] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 947.004101] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:58 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f00000002c0)=""/229, 0x53) getdents(r0, &(0x7f00000004c0)=""/202, 0x24c) [ 947.510484] print_req_error: I/O error, dev loop0, sector 0 [ 947.517358] print_req_error: I/O error, dev loop0, sector 0 01:17:58 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3500, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:58 executing program 2: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0x8) sendto$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000640)=@abs, 0x6e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000001280)) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={'syz'}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000200)) 01:17:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6c00000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:58 executing program 0: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x3f00}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 947.781078] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 947.963832] print_req_error: I/O error, dev loop0, sector 0 01:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ba, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:59 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x47, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 948.051204] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36010000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 948.327317] print_req_error: I/O error, dev loop0, sector 0 01:17:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:59 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x8000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:17:59 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x10000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:59 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:17:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3601, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:00 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:00 executing program 2: r0 = socket(0x11, 0x2, 0x9) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x10}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x7, 0xfa, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x9, 0x3, 0x100}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000380)={r3, 0x4}, 0x8) ioctl$KDENABIO(r1, 0x4b36) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000001c0)={0x7, 0x100000001, 0xfd07}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000004c0)=ANY=[@ANYBLOB="226fee5eb5c88426a3fe24f9882f58465687354b33601c70e462ab4c2b892d9c5208e5f041a510a5fdf52af99a980a856c3c35337e54286b3ec4779015fb8788ce977c3b7a353f92f148f9a2056b2389af02dcc454bb8dbd67da31594783f1ef3f857af161f2e5ee6e25c5e4af2f81cbeed1c35f652b58ceb7a9bf4413bac9c0ecf90f2f8f540225decc6d9cebf2b8a35c6ee3c37f82ec7b0588119a062edd5c7e02409db394a86b0d0f7a7776beee1d36fc340732ae398da768fa9ab7db8976c7b55fda084fa2ef5f6fa159aee929977e9882c9aacde07f6cb80a72af24cc05cdc2ace7f4647373d8e705e8514e94ebee0c69b3f23d54199d8d5b74afd4e2fe4001c6c53261b919b7e253d66bb97e4ead1dabaab0b8602fc9f798b071553e8f5b5ce79e4d"]) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, r4, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x2000000000002) r7 = socket$inet_tcp(0x2, 0x1, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\a\x00'}) r8 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xd4ed, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20408}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="85c4978cfddb9fd9c25c036dae36ec10c43b9416d33d5c9ad10cdd1057f45727a2f310ad4604e373444b863f2034f3e6f08560b2223f5acf70eacf94d85474cd9a1d63916d0eb0f6fa0a6feacf1b8fcddfc2ea2ccee972c11fe35ce6eeafe6a080c48b2e783059e64b98e138ff1758ecdc997dfb97045b8081f6b2140f964008c94eb688e1c504343ce3c3cc6b5c3535dec9188fae4b991b39874d76a8a4f98a"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) 01:18:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:00 executing program 0: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:00 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x6400}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 949.645553] device lo entered promiscuous mode [ 949.684453] print_req_error: I/O error, dev loop0, sector 896 [ 949.685456] print_req_error: I/O error, dev loop0, sector 888 [ 949.690437] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 949.696379] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 949.696642] print_req_error: I/O error, dev loop0, sector 0 01:18:01 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7500, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:01 executing program 0: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r2 = socket(0x11, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0x0) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)={@link_local, @empty, [], {@generic={0x600}}}, &(0x7f0000000000)) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) 01:18:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x3f000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x5, 0x40003) ioctl$int_in(r1, 0x5473, &(0x7f0000000200)=0x2) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008009, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028, 0xcbff0000, 0x0, 0x0, 0xcc00]}, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='erspan0\x00', 0x7}) recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffdaf, 0x120, 0x0, 0x4f) [ 949.929241] futex_atomic_op_inuser: 7 callbacks suppressed [ 949.929253] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:01 executing program 0: r0 = getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x2, r0}) r3 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x4, 0x8, 0x8001, 0x80, 0x4, 0x3ff, 0x6, 0x4, 0xb1a, 0xffff}) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x7fffffff, 0x0, 0x800, 0x5, 0x0, 0x101, 0x0, 0x0, 0xfff, 0x600000, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x0, 0x0, 0x75ea, 0x81, 0xa6, 0xdf3, 0x5, 0x9, 0xa2, 0x5, 0x4, 0x2799, 0xa5, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xed7}, 0x404, 0x4, 0x0, 0x7, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x5, @loopback, 0x2}, {0xa, 0x0, 0x7ff, @ipv4, 0x4}, 0x6, [0x1b, 0x8, 0x7, 0x8, 0xfffffffffffffd2c, 0x9, 0x5, 0x7]}, 0x5c) listen(r4, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f0000000340)=@nl=@proc, &(0x7f0000047ffc)=0x4d, 0xffffffff00000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x100000000, 0x5}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0x200000000080002, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2000000000005, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0xfffffffffffffffe) 01:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf503000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:01 executing program 0: r0 = getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x2, r0}) r3 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x4, 0x8, 0x8001, 0x80, 0x4, 0x3ff, 0x6, 0x4, 0xb1a, 0xffff}) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x7fffffff, 0x0, 0x800, 0x5, 0x0, 0x101, 0x0, 0x0, 0xfff, 0x600000, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x0, 0x0, 0x75ea, 0x81, 0xa6, 0xdf3, 0x5, 0x9, 0xa2, 0x5, 0x4, 0x2799, 0xa5, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xed7}, 0x404, 0x4, 0x0, 0x7, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x5, @loopback, 0x2}, {0xa, 0x0, 0x7ff, @ipv4, 0x4}, 0x6, [0x1b, 0x8, 0x7, 0x8, 0xfffffffffffffd2c, 0x9, 0x5, 0x7]}, 0x5c) listen(r4, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f0000000340)=@nl=@proc, &(0x7f0000047ffc)=0x4d, 0xffffffff00000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x100000000, 0x5}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0x200000000080002, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2000000000005, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0xfffffffffffffffe) 01:18:01 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x8302}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a020000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:01 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) timer_create(0x7a4da81e1681fdf3, &(0x7f0000000080)={0x0, 0x25, 0x0, @thr={&(0x7f0000000440)="fbe19f1f5caed709f6c0d1f33ea198131913da102e7a77eb20d26ccee5911147aa7a0c15227ed92da71bceaac27afb28678219631f12d92f037aae22b7c4b4e229efd85bc3db89dca3d98e3ef2acc8b8ef7bd16625935634cdf49838ef15b0793be2e44b249fb27ec55a8c07c1bf97befc5dca8ee13b0f6af6636dacc1489d63a58c6fb5ed9d128dc3030ca68a1c5873eb96e9e7d90dde381f67e90d45da526102a7466d39493ceaf02fcd8e2aa1747a1522b604daa2a757418980c29dd9e9ad42acdc44e0117b7a0accbc740046e68f5cd06c2572d78b62f31f1c27467a916edef5e0b28db3cd0d5b6e9707500607d8ddc044", &(0x7f0000003000)="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"}}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.capability\x00', &(0x7f00000005c0)=@v2={0x2000000, [{0x40, 0x80000001}, {0x8, 0x9}]}, 0x14, 0x3) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x19, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) sendto(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40000, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x7, @local}}}, 0x80) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60) [ 950.856996] print_req_error: I/O error, dev loop0, sector 0 [ 950.864305] print_req_error: I/O error, dev loop0, sector 0 01:18:02 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x51, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:02 executing program 0: r0 = getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x2, r0}) r3 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x4, 0x8, 0x8001, 0x80, 0x4, 0x3ff, 0x6, 0x4, 0xb1a, 0xffff}) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x7fffffff, 0x0, 0x800, 0x5, 0x0, 0x101, 0x0, 0x0, 0xfff, 0x600000, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x0, 0x0, 0x75ea, 0x81, 0xa6, 0xdf3, 0x5, 0x9, 0xa2, 0x5, 0x4, 0x2799, 0xa5, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xed7}, 0x404, 0x4, 0x0, 0x7, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x5, @loopback, 0x2}, {0xa, 0x0, 0x7ff, @ipv4, 0x4}, 0x6, [0x1b, 0x8, 0x7, 0x8, 0xfffffffffffffd2c, 0x9, 0x5, 0x7]}, 0x5c) listen(r4, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f0000000340)=@nl=@proc, &(0x7f0000047ffc)=0x4d, 0xffffffff00000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x100000000, 0x5}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0x200000000080002, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2000000000005, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0xfffffffffffffffe) 01:18:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x2, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 951.050516] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 951.170184] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:02 executing program 0: r0 = getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x5, 0x10000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000480)) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x2, r0}) r3 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000100)={0x4, 0x8, 0x8001, 0x80, 0x4, 0x3ff, 0x6, 0x4, 0xb1a, 0xffff}) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x7fffffff, 0x0, 0x800, 0x5, 0x0, 0x101, 0x0, 0x0, 0xfff, 0x600000, 0x0, 0x8000, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x0, 0x0, 0x75ea, 0x81, 0xa6, 0xdf3, 0x5, 0x9, 0xa2, 0x5, 0x4, 0x2799, 0xa5, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xed7}, 0x404, 0x4, 0x0, 0x7, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, r3, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x5, @loopback, 0x2}, {0xa, 0x0, 0x7ff, @ipv4, 0x4}, 0x6, [0x1b, 0x8, 0x7, 0x8, 0xfffffffffffffd2c, 0x9, 0x5, 0x7]}, 0x5c) listen(r4, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f0000000340)=@nl=@proc, &(0x7f0000047ffc)=0x4d, 0xffffffff00000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) connect(r6, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x100000000, 0x5}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x11, 0x200000000080002, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2000000000005, &(0x7f0000000080)) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0xfffffffffffffffe) 01:18:02 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) timer_create(0x7a4da81e1681fdf3, &(0x7f0000000080)={0x0, 0x25, 0x0, @thr={&(0x7f0000000440)="fbe19f1f5caed709f6c0d1f33ea198131913da102e7a77eb20d26ccee5911147aa7a0c15227ed92da71bceaac27afb28678219631f12d92f037aae22b7c4b4e229efd85bc3db89dca3d98e3ef2acc8b8ef7bd16625935634cdf49838ef15b0793be2e44b249fb27ec55a8c07c1bf97befc5dca8ee13b0f6af6636dacc1489d63a58c6fb5ed9d128dc3030ca68a1c5873eb96e9e7d90dde381f67e90d45da526102a7466d39493ceaf02fcd8e2aa1747a1522b604daa2a757418980c29dd9e9ad42acdc44e0117b7a0accbc740046e68f5cd06c2572d78b62f31f1c27467a916edef5e0b28db3cd0d5b6e9707500607d8ddc044", &(0x7f0000003000)="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"}}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.capability\x00', &(0x7f00000005c0)=@v2={0x2000000, [{0x40, 0x80000001}, {0x8, 0x9}]}, 0x14, 0x3) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x19, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) sendto(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40000, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x7, @local}}}, 0x80) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60) 01:18:02 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000500)=0x8, 0x4) recvmmsg(r1, &(0x7f0000004300), 0x0, 0x0, &(0x7f0000004480)={0x0, r2+30000000}) 01:18:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4800000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 951.701921] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 951.896740] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 952.017978] print_req_error: I/O error, dev loop0, sector 0 [ 952.019256] Buffer I/O error on dev loop0, logical block 12, lost async page write 01:18:03 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6c00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x80000000, 0x1, &(0x7f0000000480)=""/132, &(0x7f0000000080)=0x84) 01:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 952.280212] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x203, 0x800000000009) socket$inet_udplite(0x2, 0x2, 0x88) set_tid_address(&(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000000)) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) 01:18:03 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:03 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4f00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:03 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x800, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000180)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000540)=""/66, &(0x7f00000006c0)=0x42) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x1}}, 0x0) r4 = dup2(r3, r2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f0000000380)="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", 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80089040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x320, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x10091}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}}, 0x0) 01:18:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x7, 0x7fffffff, 0x3, 0xff, 0x5, 0x402}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0xfffffdef) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0xff, @broadcast, 0x4e23, 0x2, 'rr\x00', 0x1, 0x1, 0x69}, {@loopback, 0x4e23, 0x3, 0x2, 0x2, 0x3}}, 0x44) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0xff}}}, &(0x7f0000000180)=0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0x50, &(0x7f0000000480)}, 0x18b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x3c8, 0x81) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r4, 0xffffffff}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400)=r4, 0x4) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, 0x1f2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 952.606969] print_req_error: 2 callbacks suppressed [ 952.606978] print_req_error: I/O error, dev loop0, sector 136 [ 952.623660] Buffer I/O error on dev loop0, logical block 17, lost async page write 01:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:03 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4c, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:04 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xd000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x800, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000180)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000540)=""/66, &(0x7f00000006c0)=0x42) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x1}}, 0x0) r4 = dup2(r3, r2) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281e4ee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80089040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x320, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x10091}, [@IFLA_NUM_RX_QUEUES={0x8}]}, 0x28}}, 0x0) 01:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 953.268355] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:04 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:04 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x75000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x7, 0x7fffffff, 0x3, 0xff, 0x5, 0x402}, 0x1c) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0xfffffdef) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0xff, @broadcast, 0x4e23, 0x2, 'rr\x00', 0x1, 0x1, 0x69}, {@loopback, 0x4e23, 0x3, 0x2, 0x2, 0x3}}, 0x44) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local, 0xff}}}, &(0x7f0000000180)=0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0x50, &(0x7f0000000480)}, 0x18b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x3c8, 0x81) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={r4, 0xffffffff}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400)=r4, 0x4) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x8}, 0x1f2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000540)="ad40657ed56c", &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) 01:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:04 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f00000002c0)=@ethernet, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000), 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x0, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x254000) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) 01:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:04 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5400, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setuid(r1) r2 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x101, 0x300) connect$l2tp(r2, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24}, 0x2, 0x2, 0x3, 0x3}}, 0x2e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff8f) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x400000, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4004b100, &(0x7f00000003c0)={0x18, 0x0, {0x1, @remote, 'irlan0\x00'}}) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x40}, &(0x7f0000000200)=0x8) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r0}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0x1000}, 0x4) r6 = userfaultfd(0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x1}}}, 0x84) fstat(r2, &(0x7f00000007c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000380)={0x0, @dev={[], 0x1c}}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xb04000000000000, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x100, 0x0) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) read(r6, &(0x7f0000009f9c)=""/100, 0x64) write$P9_RUNLINKAT(r4, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7) 01:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x20000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000140)="600cb28d856d", 0x6, 0x6, 0x0, 0x0, r3}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x60200, 0x0) write$P9_RCREATE(r5, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x40, 0x3}, 0x80}}, 0x18) sendto$inet6(r4, &(0x7f0000000040)="284e10b05b2d84791eddf7ec5b29c7022eefbae9d3d85981c657b470c59701665c738818bd8c977a791158dfc7b184e330df1e1b579fd138f09f6053082d1725", 0x40, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340), 0x87}]) 01:18:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 953.851745] print_req_error: I/O error, dev loop0, sector 520 [ 953.873419] print_req_error: I/O error, dev loop0, sector 1544 [ 953.914082] print_req_error: I/O error, dev loop0, sector 2056 01:18:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 953.988487] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 954.157004] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:05 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:05 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2100000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000140)="600cb28d856d", 0x6, 0x6, 0x0, 0x0, r3}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x60200, 0x0) write$P9_RCREATE(r5, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x40, 0x3}, 0x80}}, 0x18) sendto$inet6(r4, &(0x7f0000000040)="284e10b05b2d84791eddf7ec5b29c7022eefbae9d3d85981c657b470c59701665c738818bd8c977a791158dfc7b184e330df1e1b579fd138f09f6053082d1725", 0x40, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340), 0x87}]) 01:18:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6800, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 954.516062] print_req_error: I/O error, dev loop0, sector 1696 [ 954.539863] print_req_error: I/O error, dev loop0, sector 2720 01:18:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000140)="600cb28d856d", 0x6, 0x6, 0x0, 0x0, r3}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x60200, 0x0) write$P9_RCREATE(r5, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x40, 0x3}, 0x80}}, 0x18) sendto$inet6(r4, &(0x7f0000000040)="284e10b05b2d84791eddf7ec5b29c7022eefbae9d3d85981c657b470c59701665c738818bd8c977a791158dfc7b184e330df1e1b579fd138f09f6053082d1725", 0x40, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340), 0x87}]) 01:18:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setuid(r1) r2 = syz_open_dev$amidi(&(0x7f0000000480)='/dev/amidi#\x00', 0x101, 0x300) connect$l2tp(r2, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24}, 0x2, 0x2, 0x3, 0x3}}, 0x2e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bind$can_raw(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff8f) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x400000, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4004b100, &(0x7f00000003c0)={0x18, 0x0, {0x1, @remote, 'irlan0\x00'}}) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x40}, &(0x7f0000000200)=0x8) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r0}) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x0, 0x1000}, 0x4) r6 = userfaultfd(0x0) ioctl$KDSKBLED(r4, 0x4b65, 0x6) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x1}}}, 0x84) fstat(r2, &(0x7f00000007c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000380)={0x0, @dev={[], 0x1c}}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xb04000000000000, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x100, 0x0) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) read(r6, &(0x7f0000009f9c)=""/100, 0x64) write$P9_RUNLINKAT(r4, &(0x7f0000000600)={0x7, 0x4d, 0x1}, 0x7) 01:18:05 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x32000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 954.667272] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:06 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3d00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) io_setup(0x9, &(0x7f0000000100)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000000140)="600cb28d856d", 0x6, 0x6, 0x0, 0x0, r3}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x60200, 0x0) write$P9_RCREATE(r5, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x40, 0x3}, 0x80}}, 0x18) sendto$inet6(r4, &(0x7f0000000040)="284e10b05b2d84791eddf7ec5b29c7022eefbae9d3d85981c657b470c59701665c738818bd8c977a791158dfc7b184e330df1e1b579fd138f09f6053082d1725", 0x40, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340), 0x87}]) [ 955.056345] print_req_error: I/O error, dev loop0, sector 416 [ 955.062413] Buffer I/O error on dev loop0, logical block 52, lost async page write 01:18:06 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0xa00, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:06 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5700, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:06 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000008000/0x1000)=nil) remap_file_pages(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@remote, @empty, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000480)=0xe8) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/233, 0xe9}], 0x1, &(0x7f0000000680)=""/209, 0xd1, 0x9}, 0x101}, {{&(0x7f0000000780)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000800)=""/24, 0x18}, {&(0x7f0000000840)=""/187, 0xbb}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/57, 0x39}, {&(0x7f0000001a00)=""/55, 0x37}, {&(0x7f0000001a40)=""/251, 0xfb}, {&(0x7f0000001b40)=""/225, 0xe1}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/22, 0x16}], 0xa, 0x0, 0x0, 0xfecb}, 0x7f}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/101, 0x65}, {&(0x7f0000001e40)=""/54, 0x36}, {&(0x7f0000001e80)=""/4, 0x4}, {&(0x7f0000001ec0)=""/158, 0x9e}], 0x4, &(0x7f0000001fc0)=""/98, 0x62, 0x1}, 0x8000}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002040)=""/34, 0x22}, {&(0x7f0000002080)=""/184, 0xb8}, {&(0x7f0000002140)=""/182, 0xb6}, {&(0x7f0000002200)=""/125, 0x7d}, {&(0x7f0000002280)=""/64, 0x40}], 0x5, &(0x7f0000002300)=""/129, 0x81, 0x7ff}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/78, 0x4e}, {&(0x7f0000003440)=""/235, 0xeb}, {&(0x7f0000003540)=""/227, 0xe3}, {&(0x7f0000003640)=""/138, 0x8a}, {&(0x7f0000003700)=""/74, 0x4a}, {&(0x7f0000003780)=""/114, 0x72}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x8, &(0x7f0000004840)=""/175, 0xaf, 0x1}, 0x9}], 0x5, 0x10040, &(0x7f00000049c0)) getpeername$packet(r0, &(0x7f0000005a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005a40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007180)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00000071c0)={@loopback, 0x0}, &(0x7f0000007200)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007240)={0x0, @empty, @multicast1}, &(0x7f0000007280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000072c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f00000073c0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000007400)={@broadcast, @loopback, 0x0}, &(0x7f0000007440)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007980)={0x0, @multicast2, @dev}, &(0x7f00000079c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000007a00)={@broadcast, @empty, 0x0}, &(0x7f0000007a40)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008dc0)={0x0, @rand_addr, @dev}, &(0x7f0000008e00)=0xc) accept4$packet(r0, &(0x7f0000008e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008e80)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000008ec0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000008fc0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000009000)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000009100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000f080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f000000f180)=0xe8) accept4$packet(r0, &(0x7f000000f1c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000f200)=0x14, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000f240)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f000000f340)=0xe8) getpeername$packet(r0, &(0x7f000000f380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000f3c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000f400)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f000000f500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000f600)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000f640)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f000000f740)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000f780)={'veth1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f000000f880)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f000000f980)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f000000f9c0)={@mcast1, 0x0}, &(0x7f000000fa00)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f000000fa40)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f000000fa80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000fb00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000fac0)={&(0x7f0000010000)=ANY=[@ANYBLOB="f8080000", @ANYRES16=r1, @ANYBLOB="080a29bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="380202004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000300000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="40000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r5, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="2c0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000101000001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000700000008000100", @ANYRES32=r12, @ANYBLOB="e8010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000900000008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ff07000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="240202003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r18, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400b500000008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b0000000800040001ffffff08000600", @ANYRES32=r20, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000080010008000600", @ANYRES32=r22, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="8c0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r25, @ANYBLOB="08000100", @ANYRES32=r26, @ANYBLOB="b800020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r28, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x8f8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) 01:18:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) setxattr$security_evm(&(0x7f0000000080)="e91f7189591e9233614b00", &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x5, 0x1, 0xb, 0x2, 0x60, "3efb6cc33b6f2a27aaa51641c8478c7caa18fcb3e85429e0bf8cd5d2762ebe49fe509c56504c8c81a9960833029d12d5b253983b1cc4e77b5d9f38dd5a3524b3e5d746a70e15162063376b5a524257ee8f59e4c2d2eb285340ca9453757876fc"}, 0x6a, 0x0) r2 = socket$unix(0x1, 0x7, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) listen(r1, 0x5) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xffff, 0x80000000, 0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x14) 01:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 955.477609] print_req_error: I/O error, dev loop0, sector 0 [ 955.489434] futex_atomic_op_inuser: 1 callbacks suppressed [ 955.489456] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:06 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x480000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x100000001, 0x20, 0x50]}, &(0x7f0000000100)=0xa) r1 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x2096}], 0x1, &(0x7f0000000140), &(0x7f0000000300), 0x8) 01:18:06 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x62, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) setxattr$security_evm(&(0x7f0000000080)="e91f7189591e9233614b00", &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@v2={0x5, 0x1, 0xb, 0x2, 0x60, "3efb6cc33b6f2a27aaa51641c8478c7caa18fcb3e85429e0bf8cd5d2762ebe49fe509c56504c8c81a9960833029d12d5b253983b1cc4e77b5d9f38dd5a3524b3e5d746a70e15162063376b5a524257ee8f59e4c2d2eb285340ca9453757876fc"}, 0x6a, 0x0) r2 = socket$unix(0x1, 0x7, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0x43) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) listen(r1, 0x5) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xffff, 0x80000000, 0x0, 0x0, 0x6}, &(0x7f00000002c0)=0x14) [ 955.814987] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:07 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) listen(r1, 0x0) r2 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x6, 0x4003) sendto(r0, &(0x7f0000000100)="0f15fadafe1ae9370051cf750c872f39ac452911ed2fd2", 0x17, 0x4000, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x100000001}, 0x0, 0x4, 0x4, 0x4}}, 0x80) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f00000000c0)) r3 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="521f26510e58869525edc07e148ee75a67a4e35f3395cee677a43dbd6ef9df1a6b38e435625c744314cae9ca7cdceb91769c80b9fdd59eec1d608655f3abcec3962330a9a82e51162b1d3776c009cf152a7b40ba6c238986cd6a8b4cd25bf84643002ae0590e535bcd57cfec4a2a", 0x6e, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f00000002c0)=@encrypted_load={'load ', 'default', 0x20, 'user:', '/dev/rtc#\x00', 0x20, 0xfffffffffffffffc, 0x20, [0x76, 0x77, 0x35, 0x65, 0x35, 0x64]}, 0x39, r4) [ 955.855205] print_req_error: I/O error, dev loop0, sector 256 [ 955.861924] print_req_error: I/O error, dev loop0, sector 0 01:18:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe010000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2ca75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d964e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb4316cceb5bae136654e58499da7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470a8") getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ff8000/0x3000)=nil, 0x3000}, &(0x7f0000000340)=0x10) fcntl$setstatus(r0, 0x4, 0x4000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) preadv(r0, &(0x7f00000001c0), 0x1c1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x1) 01:18:07 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x52, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:07 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f00000001c0)={r1, r2/1000+10000}, 0x105) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000200), &(0x7f00000000c0)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80, 0x0) shutdown(r0, 0x1) sendto$inet6(r3, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 01:18:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x600, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:07 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0185649, &(0x7f00000001c0)={0xbb0000, 0x1, 0xfd64, [], &(0x7f0000000180)={0x9d0902, 0x0, [], @value=0x5}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058560f, &(0x7f00000012c0)={0x0, 0x9, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, [0x800000, 0x0, 0x20000000000000]}) fcntl$getown(r0, 0x9) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000000)={0x1, 0xeed, {0xd6, 0x2, 0x3007, 0x0, 0x9, 0x0, 0x1, 0x7}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80001, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000100)=""/90) [ 956.294447] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 956.304323] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:18:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:07 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x101, 0x8b82) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x6f, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656347c00000000000000000000000e7ffffb8fd293100000000000000000007f85d49ea2d7c48333360eed005f6e4fab4c0841ba5e4a18bdac212d73528739855d4217bcdde314fd15b195eae2becf497e069df7afdf29828fb0aa9e9"], &(0x7f00000000c0)=0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0xfffffffffffff362}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000080)=@random={'osx.', "ac00"}) prctl$setname(0xf, &(0x7f0000000340)='/dev/dmmidi#\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r5, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r0, 0x0, 0x20, 0x8, 0x4}) [ 956.390509] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:07 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendto(r0, &(0x7f0000000040)="120000001a00e7ef007b00000000000000a1", 0x12, 0x48805, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000007d40), &(0x7f0000007e00)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000007e40)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) 01:18:08 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4400000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x400000000000628, 0x100000008000) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x400) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r0, 0x0, 0xfffffffffffffefb, &(0x7f0000000040)="6d696de09bb182fd655f747970658ec9c935236d643573546d73656c66265e7365637572697479234076", 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x2, 0x0, 0x8000, r2, 0x0, 0x0, 'syz0\x00', &(0x7f0000000140), 0x0, [], [0x0, 0x20]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/42) 01:18:08 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x4, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:08 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x101, 0x8b82) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x6f, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656347c00000000000000000000000e7ffffb8fd293100000000000000000007f85d49ea2d7c48333360eed005f6e4fab4c0841ba5e4a18bdac212d73528739855d4217bcdde314fd15b195eae2becf497e069df7afdf29828fb0aa9e9"], &(0x7f00000000c0)=0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0xfffffffffffff362}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000080)=@random={'osx.', "ac00"}) prctl$setname(0xf, &(0x7f0000000340)='/dev/dmmidi#\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r5, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r0, 0x0, 0x20, 0x8, 0x4}) 01:18:08 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x101, 0x8b82) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x6f, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656347c00000000000000000000000e7ffffb8fd293100000000000000000007f85d49ea2d7c48333360eed005f6e4fab4c0841ba5e4a18bdac212d73528739855d4217bcdde314fd15b195eae2becf497e069df7afdf29828fb0aa9e9"], &(0x7f00000000c0)=0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0xfffffffffffff362}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000080)=@random={'osx.', "ac00"}) prctl$setname(0xf, &(0x7f0000000340)='/dev/dmmidi#\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r5, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r0, 0x0, 0x20, 0x8, 0x4}) [ 957.466163] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 957.784235] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86020000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:09 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 958.357323] print_req_error: 2 callbacks suppressed [ 958.357333] print_req_error: I/O error, dev loop0, sector 16 [ 958.368292] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 958.376690] print_req_error: I/O error, dev loop0, sector 7432 [ 958.383026] Buffer I/O error on dev loop0, logical block 929, lost async page write [ 958.391333] print_req_error: I/O error, dev loop0, sector 0 01:18:09 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xfffffff0, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x101, 0x8b82) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x6f, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656347c00000000000000000000000e7ffffb8fd293100000000000000000007f85d49ea2d7c48333360eed005f6e4fab4c0841ba5e4a18bdac212d73528739855d4217bcdde314fd15b195eae2becf497e069df7afdf29828fb0aa9e9"], &(0x7f00000000c0)=0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0xfffffffffffff362}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000080)=@random={'osx.', "ac00"}) prctl$setname(0xf, &(0x7f0000000340)='/dev/dmmidi#\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r5, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r0, 0x0, 0x20, 0x8, 0x4}) 01:18:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0x101, 0x8b82) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x6f, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r3, 0x1000000) sendfile(r2, r3, &(0x7f00000037c0)=0xf10001, 0xfffffdef) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656347c00000000000000000000000e7ffffb8fd293100000000000000000007f85d49ea2d7c48333360eed005f6e4fab4c0841ba5e4a18bdac212d73528739855d4217bcdde314fd15b195eae2becf497e069df7afdf29828fb0aa9e9"], &(0x7f00000000c0)=0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000380)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000140)) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {}, 0x8, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000040)={0x0, 0xfffffffffffff362}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) fremovexattr(r2, &(0x7f0000000080)=@random={'osx.', "ac00"}) prctl$setname(0xf, &(0x7f0000000340)='/dev/dmmidi#\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000000)={r5, &(0x7f0000000200), &(0x7f0000000100)}, 0x20) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000003c0)={r0, 0x0, 0x20, 0x8, 0x4}) 01:18:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x7a00000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:10 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5e000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 958.776333] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:10 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xf4ffffff, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 959.154816] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:10 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000003c0)="f30f01c80f1e45000f22276766c7442400067c2c826766c7442402b01d00006766c744240600000000670f011c240f06660f6fdb650f214b0f35360f01c99af8539400"}], 0x1, 0x0, &(0x7f0000000600), 0xac) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000440)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000180)=0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x2, 0x40, 0xffffffffffff20dd, 0x9, 0x0, 0xffffffff, 0x21, 0x8, 0x8000, 0x0, 0x1, 0xd318, 0x100000001, 0x0, 0x2, 0x1, 0x4, 0x1fffffffc, 0x3, 0x7f, 0x8000, 0x0, 0xfff, 0x8, 0x7, 0x8, 0x101, 0x8000, 0x1, 0xe3, 0x9, 0x5f9b0d2, 0x8, 0x3f, 0xa0, 0x200, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x8800, 0x3, 0xe125, 0x6, 0x4, 0x6, 0x7ff}, 0x0, 0x4, r3, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xdb1, 0xff, 0x2, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x4], 0x1f000}) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x200a00) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000200000000000000e400000000000000", @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8f80c41496fc3f67"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:18:10 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6700, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000380), 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x48804) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) 01:18:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26010000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "363e8af5"}, 0x0, 0x0, @offset, 0x4}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x400) ioctl$VT_DISALLOCATE(r1, 0x5608) 01:18:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x400000000000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:11 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) prctl$seccomp(0x16, 0x0, &(0x7f0000000080)) r1 = socket(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000240)={[], 0x1, 0x4, 0x3, 0x9, 0x9, r2}) io_setup(0xf, &(0x7f00000002c0)=0x0) io_submit(r3, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080), 0x121}]) mq_timedreceive(r0, &(0x7f00000000c0)=""/163, 0xa3, 0xf923, &(0x7f0000000040)) 01:18:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x400481, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x40000, 0x0, [0x5, 0x3, 0x0, 0x0, 0x7fff, 0xfffffffffffffff9, 0x2, 0x401]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast2}, 0x350, 0xe8, 0x5, 0x10001, 0x9, 0x0, 0x0, 0xffffffffffffb9ad}) recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', r3}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x14) r4 = memfd_create(&(0x7f0000000700)='team\x00', 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x1f}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000000c0)=0x404000) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f00000002c0)="0ffbf6df71dbc8d4cad2f5ac755361c6a5b71fecc288333d1e595b56593351622b923bde4344d54d97b45d2a905d2830727ef9baf6367215860df262c16d8fdbab8f2f88256e7953e57a71b7d7bee2227c36e70453aeb2b04d579bb9bf26027343d96655f898c04462a52901e4875e426d265220f1d182276977132082f301524d6d965ad8440f1a43240ded27c4999eb88b096b257122c56b32c3e11c2097aed4fbe0", 0xa3) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') preadv(r5, &(0x7f00000017c0), 0x1fe, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000003c0)={0x6, r5, 0x1}) 01:18:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x87, @empty, 0x4e21, 0x4, 'none\x00', 0x22, 0x8, 0x43}, 0x2c) ioctl$PPPIOCSFLAGS(r0, 0x4004743b, &(0x7f0000000280)) 01:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 960.051234] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:11 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:11 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) sendfile64(r0, r0, &(0x7f0000000080), 0x3b16c4c0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) [ 960.247749] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 960.531477] print_req_error: I/O error, dev loop0, sector 16 [ 960.537516] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 960.546324] print_req_error: I/O error, dev loop0, sector 8576 [ 960.552481] Buffer I/O error on dev loop0, logical block 1072, lost async page write 01:18:11 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5b, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:11 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x400481, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380)=0x8, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x40000, 0x0, [0x5, 0x3, 0x0, 0x0, 0x7fff, 0xfffffffffffffff9, 0x2, 0x401]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000600)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x4e23, @multicast2}, 0x350, 0xe8, 0x5, 0x10001, 0x9, 0x0, 0x0, 0xffffffffffffb9ad}) recvmmsg(0xffffffffffffff9c, &(0x7f0000004440)=[{{&(0x7f0000001bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=""/112, 0x70}}], 0x1, 0x0, &(0x7f00000045c0)={0x0, 0x989680}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', r3}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x14) r4 = memfd_create(&(0x7f0000000700)='team\x00', 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x1f}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000000c0)=0x404000) setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f00000002c0)="0ffbf6df71dbc8d4cad2f5ac755361c6a5b71fecc288333d1e595b56593351622b923bde4344d54d97b45d2a905d2830727ef9baf6367215860df262c16d8fdbab8f2f88256e7953e57a71b7d7bee2227c36e70453aeb2b04d579bb9bf26027343d96655f898c04462a52901e4875e426d265220f1d182276977132082f301524d6d965ad8440f1a43240ded27c4999eb88b096b257122c56b32c3e11c2097aed4fbe0", 0xa3) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='status\x00') preadv(r5, &(0x7f00000017c0), 0x1fe, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000003c0)={0x6, r5, 0x1}) 01:18:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x1000000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 960.874723] print_req_error: I/O error, dev loop0, sector 0 [ 960.911087] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:12 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x69, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:12 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46020000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 961.232324] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 961.252650] print_req_error: I/O error, dev loop0, sector 672 01:18:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100)=0x6000, 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:12 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7200000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 961.667854] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) 01:18:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1f, 0x4000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"777d85df0fed8633c1d5b273271baa548cc98818bbb4a9e8e8bb8b63cd7f0719517d36ff4ed12fb68de7cf5d1229434d8ea00275113987ff9e295e98130db05208eb475c7dcc4cbf68619aa7fcd9c3bdd0d39aa0f31304a2ed01a8975152428be631333731d8acf4469b9a56a1f414eb49c8bdd84a61d9ade6a06f2940c690d166880dfa69266373e9ceadfacd1dcd12c226501da1a39477ab35a684875abe23b658e4a202af24968ae6c53fa661b4784d39046ad095c8f4cd3c8c9c5601046cab4d225ff265ab423c1eba4e3211e10133d58695806f76b01c3b0784822faadc8adbb27d795ddc0f7a357022262d840026f34e963b3e1214041b60f174872412900174713cc6ecbdc856e2c951c9461ebf5b66968ff715d9f562c5bf369214fa944ab1f577be3bd7dd1701d479e680aec52395cf541b0b954426a3a58a5d7899e7f685554d1564898c92c98e2ad06df1e9934b4280a950c68f200ddf9b0c6b909cd5a629ad32012acad4bcfddbb1075375409257a8782980a9611a35996f7a7b8340be312f066ad0c942a41eae0d9ca9366608f3798a9ff3022cf55152028c63045047470eed845f8d98e8d86da3c865b568596e3d37aca2d1a9a98449f9092d1f2aca70914fe29f4490b719a5c13c04d00eca3903becdea2a7b98b3e6fc4a37f4f58e503639f9fa2b7e7c2f806d61999988f9de91d759cb3e5790c73720aaf7cd978aabbaac158f89337bc0e8199dfa252314a66ab5617b135351c4ea71f2b6ef1f5cd4bef10c955de25cca45ceed38b0f4841b338c13703c60bc5f88fd9f3ea10dea758786c647f887488b37c3d72a5eaf6e02db2d25510fc0539f409df8899c3e1f14cb9864046f7809c96affdaea98b6272360ac80d3598061a3cc39c43197656ac0b2d185a4f180dffc0ca4bd091c85b6cf6bb60609f928dab82b5e5fa5957ec386bfc54a08549dd3f12b16c05c379ef03a5b1290716035303a2ab02fae96e89f8b46e92bf23d6b004a795ee453f5dc0315d16bfcc940b3baf8df3592a38ddd0933606731b6b8d77666d13a8d0c5d441230f3cbb0a42fd103048a3f9118f17e2afb8eb66de4b203963729ec98f830d1015b4082a1e3cc16d0d1c2ec8548474782070b15f79d9acea183d5cb72258b76b5dd4335a228d16567dff9efaa78146372fe780f9c8ea6ad83e38d0cfdc531f0a326b49a9acb635878bc125cd6682bd221aac9c7eaeea7f289a56887bcb7e402d4ae0ce0725a6734383f5b7ff96f3449ab9ee29b845eea5b55db894de78a552d35bfdcbd67cacb95266a5a853da5ffa1da04e5cf3f929bc3b60589994f4838e0c1432f0f8bda29627c6ffe96a75c32ddc89e6c5d3d5a451d320cec3204a4ef293f4804706ad55458a199baf3d96794b30e331b3c3bc60ce5d268057cdfc90a96d000"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x7f, 0x0, 0x6}, 0x14) ioctl$TIOCSBRK(r3, 0x5427) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10d000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000080)) socket(0xc, 0x0, 0x0) 01:18:13 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6c000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 962.305410] *** Guest State *** [ 962.319735] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 962.330692] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 962.364075] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 962.375852] CR3 = 0x0000000000000000 [ 962.379749] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 962.414386] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 962.431790] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 962.452480] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 01:18:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3601000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 962.475689] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.498812] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.568392] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.630121] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.639106] print_req_error: I/O error, dev loop0, sector 0 [ 962.647955] print_req_error: I/O error, dev loop0, sector 272 [ 962.653942] Buffer I/O error on dev loop0, logical block 34, lost async page write 01:18:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 962.752490] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.760726] GDTR: limit=0x00000000, base=0x0000000000000000 [ 962.781219] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.802662] IDTR: limit=0x00000000, base=0x0000000000000000 [ 962.828156] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 962.844868] EFER = 0x0000000000000000 PAT = 0x0007040600070406 01:18:14 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7800000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) [ 962.852581] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 962.876024] Interruptibility = 00000000 ActivityState = 00000000 01:18:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7a00, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 962.901085] *** Host State *** [ 962.910340] RIP = 0xffffffff8120427e RSP = 0xffff8801ba417400 [ 962.941861] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 962.973357] FSBase=0000000000000000 GSBase=ffff8801dae00000 TRBase=fffffe0000033000 01:18:14 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x83020000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 963.021993] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 963.067754] CR0=0000000080050033 CR3=00000001bb81e000 CR4=00000000001426f0 [ 963.091659] print_req_error: I/O error, dev loop0, sector 392 [ 963.097719] Buffer I/O error on dev loop0, logical block 49, lost async page write [ 963.222474] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 963.230037] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 963.251797] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 963.267079] *** Control State *** 01:18:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 963.270721] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 963.277938] EntryControls=0000d1ff ExitControls=002fefff [ 963.280873] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 963.284242] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 963.298931] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 963.306480] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 963.314232] reason=80000021 qualification=0000000000000000 [ 963.320718] IDTVectoring: info=00000000 errcode=00000000 01:18:14 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x57000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 963.346457] TSC Offset = 0xfffffdfa5abad76f [ 963.363257] TPR Threshold = 0x00 [ 963.382138] EPT pointer = 0x000000018e19501e 01:18:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) 01:18:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) 01:18:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:14 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x49000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x2, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:15 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x283}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) 01:18:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000400)=0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000480)={0x9, 0x4, 0x4, 0x5, 0x0, 0x0, 0x3, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000002a40)=ANY=[@ANYBLOB="d3f35cac712a0d915eb28545febe3f084a7083dc0a0b6afe8ae86dbeebb7239b01c0e4a2196b7c563652e94fcb7794d987c0f45f4bbb6d9670be30c2e49d56f88643a3b750ad7b5c5f2780337b"], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000006c0)={0x0, 0x1135, 0x9, 0x4, 0x0, 0x180, 0x8}, 0x20) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000002c0)) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000200)={0xa00000000000000, 0xf09f010000000000, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02ed07000000000c"], 0x8}}, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000640)=0x21b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r4, 0xd87, 0x30}, &(0x7f0000002a00)=0xc) recvmmsg(r0, &(0x7f0000008d40)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000580)=""/80, 0x50}], 0x3, &(0x7f0000001700)=""/90, 0x5a, 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001780)=""/151, 0x97}, {&(0x7f0000001840)=""/177, 0xb1}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002900)=""/246, 0xf6, 0x7fff}}, {{&(0x7f0000006f00)=@ipx, 0x80, &(0x7f0000007040)=[{&(0x7f0000007000)=""/52, 0x34}], 0x1, &(0x7f0000007080)=""/153, 0x99, 0x4}}, {{&(0x7f00000071c0)=@nfc, 0x80, &(0x7f0000008740)=[{&(0x7f0000007240)=""/4096, 0x1000}, {&(0x7f0000008240)=""/138, 0x8a}, {&(0x7f0000008300)=""/61, 0x3d}, {&(0x7f0000008340)=""/129, 0x81}, {&(0x7f00000084c0)=""/31, 0x1f}, {&(0x7f0000008500)=""/161, 0xa1}, {&(0x7f00000085c0)=""/203, 0xcb}, {&(0x7f00000086c0)=""/66, 0x42}], 0x8, &(0x7f0000008800)=""/150, 0x96, 0xfffffffffffff001}, 0x4}], 0x4, 0x1, &(0x7f0000008f00)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000008f40)={@remote}, 0x14) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v2={0x2000000, [{0x7fffffff, 0x2000000000000000}, {0x3, 0x9}]}, 0x14, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/13) 01:18:15 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x78000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 964.158524] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 964.558183] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:15 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0245629, &(0x7f0000000140)={0x7ff, 0x4a2, 0x40000, [], &(0x7f0000000100)=0xffffffffffffff9f}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$peek(0x4203, r0, &(0x7f0000000080)) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000180)={[], 0x2, 0x3, 0x5, 0x8, 0x7fffffff, r0}) 01:18:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x2, 0x1, 0x0) listen(r2, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0000000008003950323030302e7516c2574c04fee417a8782e0b63c4870aa1f134addaafe6456966c20a8b75cef11d3264545c8c01356e4621cff8f7a85c6628f925aabfced974704c8e34"], 0x15) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25090000000800040005001bd70c00000c00020008000300000900000800050009000000200001000c00000008000800ae0e000008000500ff070000"], 0x58}}, 0x20004000) ioctl(r2, 0x80000001, &(0x7f0000000140)="06ee00fb87eccc2a1e2e001891cd9b575f1b723a16fad85974c59b37e3047d0f38d5481c67233707091bfc67edbfeb9887c8e1200fad7e09ade0a9f73f0774df777a1db089093f48b94c6f54132d27593dede09a763542aa7afa2ee89d5618b137f49ee6df4f25a180539c683dd6b3796028eaf4397329090cb35d6455c5fb612a396521badf0d1543f7229dbb4fb0293a") ioctl$TCSBRK(r1, 0x5409, 0x3) 01:18:15 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1800, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:15 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x2000000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 964.830603] QAT: Invalid ioctl 01:18:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x2, 0x1, 0x0) listen(r2, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff0000000008003950323030302e7516c2574c04fee417a8782e0b63c4870aa1f134addaafe6456966c20a8b75cef11d3264545c8c01356e4621cff8f7a85c6628f925aabfced974704c8e34"], 0x15) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012abd7000fedbdf25090000000800040005001bd70c00000c00020008000300000900000800050009000000200001000c00000008000800ae0e000008000500ff070000"], 0x58}}, 0x20004000) ioctl(r2, 0x80000001, &(0x7f0000000140)="06ee00fb87eccc2a1e2e001891cd9b575f1b723a16fad85974c59b37e3047d0f38d5481c67233707091bfc67edbfeb9887c8e1200fad7e09ade0a9f73f0774df777a1db089093f48b94c6f54132d27593dede09a763542aa7afa2ee89d5618b137f49ee6df4f25a180539c683dd6b3796028eaf4397329090cb35d6455c5fb612a396521badf0d1543f7229dbb4fb0293a") ioctl$TCSBRK(r1, 0x5409, 0x3) [ 964.861321] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 964.964363] print_req_error: I/O error, dev loop0, sector 0 [ 964.993503] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) listen(r0, 0x0) ioperm(0xffffffffffff0000, 0x4, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1f, &(0x7f0000000000)=0x8dc, 0x4) 01:18:16 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:16 executing program 0: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)=0x0) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) r5 = open(&(0x7f0000000ec0)='./file0\x00', 0x80000, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000f00)={0x0, 0xfffffffffffffeff, 0x30}, &(0x7f0000000f40)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000f80)={r6, @in={{0x2, 0x4e22, @loopback}}, 0xe66, 0x4}, &(0x7f0000001040)=0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() getresgid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) getgroups(0x6, &(0x7f0000000a00)=[0xee00, 0x0, 0xee01, 0x0, 0xee01, 0xffffffffffffffff]) getresgid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) getgroups(0x5, &(0x7f0000000b00)=[0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {0x1, 0x4}, [{0x2, 0x2, r0}, {0x2, 0x0, r1}, {0x2, 0x0, r2}, {0x2, 0x3, r3}, {0x2, 0x2, r4}, {0x2, 0x6, r7}, {0x2, 0x6, r8}, {0x2, 0x4, r9}], {0x4, 0x2}, [{0x8, 0x2, r10}, {0x8, 0x7, r11}, {0x8, 0x5, r12}, {0x8, 0x2, r13}, {0x8, 0x4, r14}], {0x10, 0x4}, {0x20, 0x2}}, 0x8c, 0x0) r15 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000180)) ptrace(0x10, r15) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, r15) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 965.296003] print_req_error: I/O error, dev loop0, sector 512 [ 965.302024] Buffer I/O error on dev loop0, logical block 64, lost async page write 01:18:16 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:16 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:16 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x46, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:16 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 965.778556] print_req_error: I/O error, dev loop0, sector 768 [ 965.784760] Buffer I/O error on dev loop0, logical block 96, lost async page write 01:18:17 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:17 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2a00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7a000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 966.097298] print_req_error: I/O error, dev loop0, sector 128 [ 966.103532] Buffer I/O error on dev loop0, logical block 16, lost async page write 01:18:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e85c93cdfa08e") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x40086610, &(0x7f0000000300)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0xe473, 0x5, 0xd5, 0x2, 0x9}) 01:18:17 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1c, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0x3a9fbd6e864d86bf, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}]}, 0x30}}, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x200000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xd6, 0x1, @buffer={0x0, 0xa4, &(0x7f0000000100)=""/164}, &(0x7f0000000580)="09aec2d290487901c84562c7f3c2cfeb767cb3d113b9a82bb936c44e02746439a2dc56b45d3dc28e089822ec40c81f40a9618fd8785259a2cbc42353de432297f109135669386f81848df54624f4b5677c48823675aefa7f598292d39e336c45058c39fd2f550586268100be8b172fa70075b45a507f1be2fcc39733c7a528b569442176b0d83da921bece680d5d2be5a054e17ec4afae2bd15bf9d2218b8d0a522c3e8469cd48ec8e52ea34197cdc4cc61f6c33d4b1fdd537e61e7d0ee9bfd8ab6bff138bb18192732c181b6d0c0337a0ee4959aaf3", &(0x7f0000000340), 0x7, 0x21, 0x3, &(0x7f0000000400)}) [ 966.243927] futex_atomic_op_inuser: 2 callbacks suppressed [ 966.243938] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 966.369816] print_req_error: I/O error, dev loop0, sector 0 [ 966.481765] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:17 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:17 executing program 0: r0 = socket$inet(0x2, 0x0, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x44000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:18:17 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x28000000, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000100)=0x15) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffff", 0xc9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x3, 0x9}, 0x1ec) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000080)=0x1f, 0x4) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 01:18:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:17 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x300, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:17 executing program 2: r0 = socket(0x12, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x100a00}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x8}, @in6={0xa, 0x4e21, 0x29bf9b70, @dev={0xfe, 0x80, [], 0x13}, 0x20}, @in6={0xa, 0x4e20, 0x8, @mcast2, 0x200}], 0x54) sendfile(r0, r1, &(0x7f0000000080), 0x80000006) 01:18:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0xa5f}, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xff], 0x1f000, 0x1}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000001c0)=r4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x4, 0x3}) 01:18:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 966.775176] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:18 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000780), &(0x7f00000007c0)=0x4) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20000, 0xa) syz_execute_func(&(0x7f0000000680)="c4e1c35f1af20f5a7965c4c2019b386680e82e676465260f2b05660f1b25fa000000c4c2310a9300000000d24306c4c23dba644308af") ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x53, 0x0, 0x63, 0x1000, @scatter={0x6, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f00000001c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000400)=""/123, 0x7b}]}, &(0x7f0000000500)="e19e9b4cd2cb0345a898e832fd881be1d67acdf6550b67e4b516055598f9134b0535656da496d27756b63c0999ec605918d7463dc6a63e909123ae964366533e00e89d21cf83ad008ce93284e3ad85cdd3109521434f2f41de05d48c3bbdbae826d07a", &(0x7f0000000580)=""/82, 0x9b, 0x2, 0xffffffffffffffff, &(0x7f0000000600)}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x2, 0x80000000, 0x9, 0x20]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000004c0)='bridge_slave_1\x00') ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000700)={0xee2c, 0x800}) accept4$vsock_stream(r2, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x80000) 01:18:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 966.987148] IPVS: ftp: loaded support on port[0] = 21 01:18:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:18 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x8302000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 967.516339] print_req_error: I/O error, dev loop0, sector 40 [ 967.532669] print_req_error: I/O error, dev loop0, sector 12392 [ 967.538836] Buffer I/O error on dev loop0, logical block 1549, lost async page write 01:18:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0xa5f}, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xff], 0x1f000, 0x1}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000001c0)=r4) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000340)={0x4, 0x3}) 01:18:18 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2f000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 967.778987] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) sysfs$3(0x3) r1 = openat$cgroup_int(r0, &(0x7f0000000080)="6370757365742e6d656d73005b01983b02d7423179e4a724d6f6789dece8d780a6e7", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0xc) 01:18:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:19 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2c000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 967.907476] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:19 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r8) 01:18:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:19 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x58000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:19 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:19 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x10, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)='-em1{nodevnodev\x00', &(0x7f0000000140)='vboxnet0trusted!eth0GPLvboxnet1lovmnet1\x00', &(0x7f0000000180)='/dev/kvm\x00', &(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000200)='/dev/kvm\x00', &(0x7f0000000240)='/dev/kvm\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='/dev/kvm\x00'], 0x800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200000000000000fffffff90500000000000000"]) 01:18:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x3000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:19 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 968.875521] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 969.019921] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 969.114074] print_req_error: I/O error, dev loop0, sector 528 [ 969.120057] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 969.128616] print_req_error: I/O error, dev loop0, sector 8968 [ 969.134684] Buffer I/O error on dev loop0, logical block 1121, lost async page write [ 969.143949] print_req_error: I/O error, dev loop0, sector 0 01:18:20 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r8) 01:18:20 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000adcf64544b9d7c0d00000000000000000000000000000000000000"], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r1, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077f0600000019960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac0f00003f45"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r5 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x3, 0x5, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000a00)={r3, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r5, 0x402, 0x13) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r6 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x85) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000005c0)={{0xa, 0x4e20, 0x0, @empty, 0x7ff}, {0xa, 0x4e20, 0x400, @mcast2, 0x1ff}, 0x0, [0x9, 0x800, 0x8001]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000340)='\x00') r7 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) writev(r7, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) 01:18:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1100000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 969.353390] Buffer I/O error on dev loop0, logical block 65, lost async page write 01:18:20 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x200000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:20 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r8) 01:18:20 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000adcf64544b9d7c0d00000000000000000000000000000000000000"], &(0x7f0000000700)=0x1) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x204}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000009c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000001ec0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000001e80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x40) bind$inet(r1, &(0x7f0000000400)={0x2, 0x2004e25, @remote}, 0x8abb0a022360233c) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000eaa8dd7b982103077f0600000019960e54ecbd686a7c5df3eb476f37da05000000008d1cfb5a4aac0f00003f45"]}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000380)={@remote}, &(0x7f00000003c0)=0x14) r5 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000007c0)={0x0, 0x8001, 0x0, 0x7, 0x2}) socketpair(0x3, 0x5, 0xc8, &(0x7f0000000780)) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000a00)={r3, @multicast2, @local}, 0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xa8}, &(0x7f0000000040)=0x8) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000700)={'filter\x00'}, &(0x7f00000001c0)=0x7) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fcntl$notify(r5, 0x402, 0x13) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r6 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x85) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000005c0)={{0xa, 0x4e20, 0x0, @empty, 0x7ff}, {0xa, 0x4e20, 0x400, @mcast2, 0x1ff}, 0x0, [0x9, 0x800, 0x8001]}, 0x5c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000340)='\x00') r7 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000380)) writev(r7, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) 01:18:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1900, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34c, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 969.597773] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x608000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000700)=""/51, &(0x7f0000000740)=0x33) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) setresuid(0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x0, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000780)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @mcast2, 0x5}, 0x1c) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/120) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x6, 0x9, 0x2, 0x9, 0x0, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000840)={r4, 0xa3, "fd9ecb5e4b13e477628f693f7bedaef6af994db91f2dca830fc11c7187c77d9ced0d9c8db0e91eaa04204a28449866c8a4e99a1e6551e5b92f6501d9ef807f93cbd0198b370051797281e456d1db4bdf75ecee3d63009f9db8840052d82cdb57b6f7746ecf50888a2ea852e975d51c630c2b47c4e839dd173478863be44af248173262012c326b47c2483fd721208fdb53138e4ad48365dddbcbf851d9651740814173"}, &(0x7f0000000480)=0xab) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0), &(0x7f0000000080)=0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000006c0)={0x8, 0x0, 0x0, 0x80}) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r5}) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="e566f6aaa7e369be7a8948c68b2d7d57a4fca92b2b11e253e369"], 0x1a) r6 = accept4(r2, 0x0, &(0x7f0000000400)=0xfffffffffffffd3c, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0x345, 0x2, 0x9, 0x4, 0x5299}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="45cf223fe0c9d706bfbc281dad7174592ddd00bf638b8d91505b99d93088e5b843dfbc87ef437fd9dd03224098bdf6627394c040785dbd9a51611c69fcde4f2123186a21397f835c5216dd382509c39da2e1c362439c928981eb833c6ffb826822d5d97ec205f85e12a92f0cc5"], &(0x7f0000000340)=0x1) dup3(r1, r6, 0x80000) 01:18:20 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1200, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66020000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 969.898846] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:21 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4e00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:21 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a020000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4c000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:21 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r8) 01:18:21 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3c, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x608000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000700)=""/51, &(0x7f0000000740)=0x33) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) setresuid(0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x0, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000780)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @mcast2, 0x5}, 0x1c) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/120) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x6, 0x9, 0x2, 0x9, 0x0, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000840)={r4, 0xa3, "fd9ecb5e4b13e477628f693f7bedaef6af994db91f2dca830fc11c7187c77d9ced0d9c8db0e91eaa04204a28449866c8a4e99a1e6551e5b92f6501d9ef807f93cbd0198b370051797281e456d1db4bdf75ecee3d63009f9db8840052d82cdb57b6f7746ecf50888a2ea852e975d51c630c2b47c4e839dd173478863be44af248173262012c326b47c2483fd721208fdb53138e4ad48365dddbcbf851d9651740814173"}, &(0x7f0000000480)=0xab) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0), &(0x7f0000000080)=0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000006c0)={0x8, 0x0, 0x0, 0x80}) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r5}) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="e566f6aaa7e369be7a8948c68b2d7d57a4fca92b2b11e253e369"], 0x1a) r6 = accept4(r2, 0x0, &(0x7f0000000400)=0xfffffffffffffd3c, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0x345, 0x2, 0x9, 0x4, 0x5299}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="45cf223fe0c9d706bfbc281dad7174592ddd00bf638b8d91505b99d93088e5b843dfbc87ef437fd9dd03224098bdf6627394c040785dbd9a51611c69fcde4f2123186a21397f835c5216dd382509c39da2e1c362439c928981eb833c6ffb826822d5d97ec205f85e12a92f0cc5"], &(0x7f0000000340)=0x1) dup3(r1, r6, 0x80000) [ 970.585619] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:22 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 01:18:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x608000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000700)=""/51, &(0x7f0000000740)=0x33) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) setresuid(0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x0, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000780)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @mcast2, 0x5}, 0x1c) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/120) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x6, 0x9, 0x2, 0x9, 0x0, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000840)={r4, 0xa3, "fd9ecb5e4b13e477628f693f7bedaef6af994db91f2dca830fc11c7187c77d9ced0d9c8db0e91eaa04204a28449866c8a4e99a1e6551e5b92f6501d9ef807f93cbd0198b370051797281e456d1db4bdf75ecee3d63009f9db8840052d82cdb57b6f7746ecf50888a2ea852e975d51c630c2b47c4e839dd173478863be44af248173262012c326b47c2483fd721208fdb53138e4ad48365dddbcbf851d9651740814173"}, &(0x7f0000000480)=0xab) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0), &(0x7f0000000080)=0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000006c0)={0x8, 0x0, 0x0, 0x80}) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r5}) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="e566f6aaa7e369be7a8948c68b2d7d57a4fca92b2b11e253e369"], 0x1a) r6 = accept4(r2, 0x0, &(0x7f0000000400)=0xfffffffffffffd3c, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0x345, 0x2, 0x9, 0x4, 0x5299}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="45cf223fe0c9d706bfbc281dad7174592ddd00bf638b8d91505b99d93088e5b843dfbc87ef437fd9dd03224098bdf6627394c040785dbd9a51611c69fcde4f2123186a21397f835c5216dd382509c39da2e1c362439c928981eb833c6ffb826822d5d97ec205f85e12a92f0cc5"], &(0x7f0000000340)=0x1) dup3(r1, r6, 0x80000) 01:18:22 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 01:18:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:22 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x8302}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:22 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') socket$inet6_tcp(0xa, 0x1, 0x0) 01:18:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 971.581577] futex_atomic_op_inuser: 1 callbacks suppressed [ 971.581588] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 971.691294] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 971.798477] print_req_error: 1 callbacks suppressed [ 971.798489] print_req_error: I/O error, dev loop0, sector 11424 [ 971.831123] print_req_error: I/O error, dev loop0, sector 264 [ 971.837194] Buffer I/O error on dev loop0, logical block 33, lost async page write [ 971.845413] print_req_error: I/O error, dev loop0, sector 13272 01:18:23 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x9f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x608000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000700)=""/51, &(0x7f0000000740)=0x33) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) setresuid(0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x0, 0x6}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'bridge_slave_0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000780)) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @mcast2, 0x5}, 0x1c) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/120) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x6, 0x9, 0x2, 0x9, 0x0, 0x0}, &(0x7f0000000440)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000840)={r4, 0xa3, "fd9ecb5e4b13e477628f693f7bedaef6af994db91f2dca830fc11c7187c77d9ced0d9c8db0e91eaa04204a28449866c8a4e99a1e6551e5b92f6501d9ef807f93cbd0198b370051797281e456d1db4bdf75ecee3d63009f9db8840052d82cdb57b6f7746ecf50888a2ea852e975d51c630c2b47c4e839dd173478863be44af248173262012c326b47c2483fd721208fdb53138e4ad48365dddbcbf851d9651740814173"}, &(0x7f0000000480)=0xab) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000005c0), &(0x7f0000000080)=0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000006c0)={0x8, 0x0, 0x0, 0x80}) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', r5}) write$binfmt_misc(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="e566f6aaa7e369be7a8948c68b2d7d57a4fca92b2b11e253e369"], 0x1a) r6 = accept4(r2, 0x0, &(0x7f0000000400)=0xfffffffffffffd3c, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000001c0)={0x345, 0x2, 0x9, 0x4, 0x5299}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)=ANY=[@ANYBLOB="45cf223fe0c9d706bfbc281dad7174592ddd00bf638b8d91505b99d93088e5b843dfbc87ef437fd9dd03224098bdf6627394c040785dbd9a51611c69fcde4f2123186a21397f835c5216dd382509c39da2e1c362439c928981eb833c6ffb826822d5d97ec205f85e12a92f0cc5"], &(0x7f0000000340)=0x1) dup3(r1, r6, 0x80000) 01:18:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:23 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xa00000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:23 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4600000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 972.322420] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:23 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:23 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0xfffffffffffffe72) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x100, 0x5, {0x1, 0x2c00000000, 0x1}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)=ANY=[@ANYBLOB="05000000090000000000000007000000010000000000000005001a00fe8000000000000000000000000000fffe8000000000000000000000000000df000000000100000000000000"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)="3e28a1e6cef48b7da864cccae5c2f08dc3000000001580255f3554bb7009c7f1cd6c471e5359ef1193e7c6a4e5c344aa363d4570bc3535adb573426d2acc491049d2e50000000000000000000000000000", 0x51}], 0x1, &(0x7f00000023c0), 0x0, 0x4000014}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x4000080) write$binfmt_misc(r4, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x4000, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) accept4$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14, 0x80800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={@loopback, @loopback, @dev={0xfe, 0x80, [], 0x16}, 0x3f, 0x40, 0xfff, 0x400, 0x100000001, 0x40000, r5}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r7 = getegid() chown(&(0x7f0000000040)='./file0\x00', r6, r7) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) vmsplice(r0, &(0x7f0000002480)=[{&(0x7f0000002400)="b9", 0x1}], 0x1, 0x0) 01:18:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 972.567999] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:23 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x56, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:24 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:24 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6c, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:24 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 973.147948] print_req_error: I/O error, dev loop0, sector 128 [ 973.172456] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 973.183908] print_req_error: I/O error, dev loop0, sector 1152 01:18:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x246, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 973.213664] print_req_error: I/O error, dev loop0, sector 2184 [ 973.233099] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:24 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x283}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:24 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:24 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5600, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf003, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4c00000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:24 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0xfffffffffffffe72) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x100, 0x5, {0x1, 0x2c00000000, 0x1}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)=ANY=[@ANYBLOB="05000000090000000000000007000000010000000000000005001a00fe8000000000000000000000000000fffe8000000000000000000000000000df000000000100000000000000"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)="3e28a1e6cef48b7da864cccae5c2f08dc3000000001580255f3554bb7009c7f1cd6c471e5359ef1193e7c6a4e5c344aa363d4570bc3535adb573426d2acc491049d2e50000000000000000000000000000", 0x51}], 0x1, &(0x7f00000023c0), 0x0, 0x4000014}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x4000080) write$binfmt_misc(r4, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x4000, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) accept4$packet(r3, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14, 0x80800) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000b00)={@loopback, @loopback, @dev={0xfe, 0x80, [], 0x16}, 0x3f, 0x40, 0xfff, 0x400, 0x100000001, 0x40000, r5}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r7 = getegid() chown(&(0x7f0000000040)='./file0\x00', r6, r7) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) vmsplice(r0, &(0x7f0000002480)=[{&(0x7f0000002400)="b9", 0x1}], 0x1, 0x0) 01:18:24 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 973.699014] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 973.752039] print_req_error: I/O error, dev loop0, sector 8 [ 973.758053] Buffer I/O error on dev loop0, logical block 1, lost async page write 01:18:25 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:25 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6f00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 974.053875] print_req_error: I/O error, dev loop0, sector 144 [ 974.059911] Buffer I/O error on dev loop0, logical block 18, lost async page write 01:18:25 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:25 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3700, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:25 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x3f000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7d, 0x10000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x81, 0x1, 0x0, "2d1f9697b22b615900080000be3eb789921aed1908000000367c00", 0x4}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='limits\x00') ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000000)={0xf, {0x7f, 0x8, 0x69fe}}) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000080)={0x2, @raw_data="9597e430b34a2af140ad91900ca2e3ed7f6a7eb80757503cba102093d7ebd01f940b24640b2dcd89d019eb872727f9c52cd938066c776e00c0d78183ce018f53a4e65ecdd887e058310b2e108de790d31aaa2d3cc796b888fb7c41c45ce0b80cb3663cbd6ae68bc42b73659f88f11bc9ba785d866325b07fe3f9bdd0a2721d97da1514e1e5df20fcdc8d0b70b068bf429a22eda1dd272667ce2fe0dfd38fbd9c6873df8e567c7db08b1c1a0157ca77e1940ae8a08b8f7ad31c18d7d04b129d66dc3bcc42a45fc900"}) 01:18:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x6, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)=0xcf83, 0x4) 01:18:25 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x65, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 974.769283] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800009f10005fba00000000000000000000000013b90ed2c6c248552b46c48d03cca457c093aad5af5d8b8af6f545b03fe3671069a2dea607562aba0b9c7a956862c3e9951a6df0e0f79e04b1a95d2fc976d9f8025a92a1f39bc5f4415a0cb44151ff428479a98cbd6cdfeec02a48d3d6e2412f23ac4db68ab21a6680be3b24dcd772bdb68ae6b2820b360e1e6597204bbfa824b8939b707d7386c1b2170b2ef757bc36e75b4fa3b1b3f6f454aaa3ec249e5bf54955dfeb91e0cd5a7bf5fba23e7052cfb3625618128c872690f05d2ef2b23c37d0f774c5582308117a4a0a4077e992e80c36befe67", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x122040}, 0xc) 01:18:26 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x49, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 974.999701] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:26 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:26 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) ioctl$LOOP_CLR_FD(r2, 0x4c01) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:26 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x12000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800009f10005fba00000000000000000000000013b90ed2c6c248552b46c48d03cca457c093aad5af5d8b8af6f545b03fe3671069a2dea607562aba0b9c7a956862c3e9951a6df0e0f79e04b1a95d2fc976d9f8025a92a1f39bc5f4415a0cb44151ff428479a98cbd6cdfeec02a48d3d6e2412f23ac4db68ab21a6680be3b24dcd772bdb68ae6b2820b360e1e6597204bbfa824b8939b707d7386c1b2170b2ef757bc36e75b4fa3b1b3f6f454aaa3ec249e5bf54955dfeb91e0cd5a7bf5fba23e7052cfb3625618128c872690f05d2ef2b23c37d0f774c5582308117a4a0a4077e992e80c36befe67", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x122040}, 0xc) 01:18:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xa00, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:26 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ptrace$setopts(0x4200, r0, 0x6, 0x2) tkill(r0, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) r3 = dup2(r1, r1) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r3) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000100)=""/43) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x357f, 0xfffffffffffffe01, 0x1, 0x20, 0x4, 0x2, 0xfb776910d4ee68ff, 0x9, 0x134, 0x40, 0xa5, 0xfcb, 0xef, 0x38, 0x1, 0x1, 0x0, 0x80000000}, [{0x5, 0xc8b9, 0x0, 0x4, 0x400, 0x2, 0x4, 0x5d28}, {0x7, 0xfff, 0x400, 0x101, 0x3, 0x9, 0x6, 0x9}], "30f50b79c6567d069b2ed83fc577e26e551718834bd52f6b583396dbbf29a7f7896ff181297523c227a25698ea1b4376d49ff02549fd990b9303dd651f3f11b2cde2aa0bdf2d14", [[], [], [], [], [], []]}, 0x6f7) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000840)) bind$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0405405, &(0x7f0000000900)={{0x0, 0x3, 0xc4eb, 0x1, 0x7}, 0x7, 0x300, 0x9}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000940), 0x4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000980)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000009c0)={0xed2}, 0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000a00)={0x2, "1880"}, 0x3) write$eventfd(r2, &(0x7f0000000a40)=0x7, 0x8) syz_genetlink_get_family_id$team(&(0x7f0000000a80)='team\x00') fcntl$setown(r4, 0x8, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000ac0)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x4}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x11}}, @in6={0xa, 0x4e22, 0xd7d, @ipv4, 0x4}], 0x64) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000b40)=0x1f) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000b80)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000c00)) getsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000c40)=""/96, &(0x7f0000000cc0)=0x60) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000d00)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000d40)) ioctl$RTC_AIE_OFF(r2, 0x7002) 01:18:26 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x8000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 975.742673] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:27 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1300, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:27 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x1, 0xc, [0x2, 0x6, 0x2e1]}) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) 01:18:27 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:27 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4c00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6800, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x8, 0x880) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000280)=0x1000) 01:18:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x8, 0x880) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000280)=0x1000) 01:18:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:28 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 976.785024] futex_atomic_op_inuser: 1 callbacks suppressed [ 976.785037] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 976.833324] print_req_error: I/O error, dev loop0, sector 2056 [ 976.867292] print_req_error: I/O error, dev loop0, sector 3080 01:18:28 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x8, 0x880) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000280)=0x1000) [ 977.001981] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:28 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x8302}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x8, 0x880) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000280)=0x1000) 01:18:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x3, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5200000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x8, 0x880) [ 977.426760] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:28 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7a00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 977.566614] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r3, 0xd4c2}, &(0x7f0000000180)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:29 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r2, r2, &(0x7f0000000240), 0x2000005) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:29 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:29 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8000000000, 0x8}, &(0x7f0000000080)=0xc) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xa, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000340)=0xffffffffffffff50, 0x80000) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:29 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x8118, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) sendto(r1, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:29 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xfffffffb, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 978.471116] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 978.622943] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:30 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) read(r2, &(0x7f00000005c0)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf201000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:30 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:30 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2e, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x3f00, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:30 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:30 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5500000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0030000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 979.252913] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:30 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3400000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:30 executing program 0: ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:30 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:30 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x8302000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf201, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:30 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x60, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:30 executing program 0: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:31 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf503, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 979.867279] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)) [ 979.980829] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 980.362840] print_req_error: I/O error, dev loop0, sector 12840 [ 980.368997] Buffer I/O error on dev loop0, logical block 1605, lost async page write [ 980.377173] print_req_error: I/O error, dev loop0, sector 144 [ 980.383162] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 980.391162] print_req_error: I/O error, dev loop0, sector 0 01:18:31 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6d000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:31 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:31 executing program 0: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4800000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:31 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:31 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:31 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xf000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 980.626905] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:31 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r6, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:32 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5b00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:32 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x5000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:32 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:32 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1b00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:32 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:32 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x5, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:32 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2010000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 981.521983] print_req_error: I/O error, dev loop0, sector 728 [ 981.528100] Buffer I/O error on dev loop0, logical block 91, lost async page write 01:18:32 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x8030560a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:32 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xf5ffffff00000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:33 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4c, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 982.048879] futex_atomic_op_inuser: 5 callbacks suppressed [ 982.048892] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 982.135916] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:33 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc050561a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:33 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7400000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:33 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000000)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 982.447113] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 982.612973] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 982.728273] print_req_error: I/O error, dev loop0, sector 0 [ 982.734956] print_req_error: I/O error, dev loop0, sector 16904 [ 982.741089] Buffer I/O error on dev loop0, logical block 2113, lost async page write 01:18:34 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4b00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0185647, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:34 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:34 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x48000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0445609, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:34 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3500000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:34 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:34 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:34 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0cc5640, &(0x7f00000000c0)={0x0, 0x34343459}) [ 983.386362] print_req_error: I/O error, dev loop0, sector 0 [ 983.414068] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 983.486519] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:34 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3900000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:34 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) fstatfs(r4, &(0x7f00000015c0)=""/65) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 983.763417] print_req_error: I/O error, dev loop0, sector 4104 [ 983.783550] print_req_error: I/O error, dev loop0, sector 5128 01:18:35 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:35 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x286, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:35 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x20000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:35 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5a00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:35 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc04c561a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:35 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) [ 984.189276] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:35 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x402c582a, &(0x7f00000000c0)={0x0, 0x34343459}) [ 984.288322] print_req_error: I/O error, dev loop0, sector 0 [ 984.345998] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:35 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) r4 = epoll_create1(0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000180)) r6 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:35 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x43, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 984.605412] print_req_error: I/O error, dev loop0, sector 1696 01:18:36 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0445611, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:36 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000001640)=""/92) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4c00, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1500000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x8000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 984.929213] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:36 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0245629, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc004562f, &(0x7f00000000c0)={0x0, 0x34343459}) [ 985.110463] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 985.134259] print_req_error: I/O error, dev loop0, sector 512 01:18:36 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:36 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r4 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000180)) r5 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) pwrite64(r3, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) 01:18:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0405619, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3f000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x3f00000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd600, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:36 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7c000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:36 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6800000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:37 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:37 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0d05604, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:37 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1a, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7a00000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x2, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:37 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x300000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:37 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x80885659, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:37 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:38 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x100000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:38 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:38 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:38 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 987.233969] futex_atomic_op_inuser: 6 callbacks suppressed [ 987.233980] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 987.435296] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 987.485917] print_req_error: I/O error, dev loop0, sector 17568 [ 987.492047] Buffer I/O error on dev loop0, logical block 2196, lost async page write [ 987.501308] print_req_error: I/O error, dev loop0, sector 0 01:18:38 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x77000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:38 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000001000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 'queue0\x00'}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:38 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0485619, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:38 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c5667, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x600000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:39 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40, r1}) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0cc5605, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x68000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x4004560e, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba03000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 987.943276] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:39 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @local}, &(0x7f0000000200)=0xc) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:39 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2c, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x40045612, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 988.111284] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:39 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x2000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:39 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0cc5604, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x541b, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 988.709019] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 988.875412] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 989.156042] print_req_error: I/O error, dev loop0, sector 0 [ 989.167953] print_req_error: I/O error, dev loop0, sector 13056 [ 989.174145] Buffer I/O error on dev loop0, logical block 1632, lost async page write 01:18:40 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7f51010000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:40 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:40 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x83020000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:40 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x3000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:40 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 989.361096] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0185649, &(0x7f00000000c0)={0x0, 0x34343459}) [ 989.500447] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:40 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:40 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7800, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe03, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:40 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x500, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:41 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x40045613, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:41 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 989.928105] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 989.952405] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:41 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 990.593267] print_req_error: I/O error, dev loop0, sector 0 [ 990.597778] print_req_error: I/O error, dev loop0, sector 13184 [ 990.605202] Buffer I/O error on dev loop0, logical block 1648, lost async page write 01:18:41 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x70, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x402c560b, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:41 executing program 2: r0 = socket$inet(0x15, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x600, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:41 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:41 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:41 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5f, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:42 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x8004562e, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:42 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x48, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 991.012960] print_req_error: I/O error, dev loop0, sector 1696 01:18:42 executing program 2: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc044560f, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:42 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6a, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:42 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x80045626, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 991.427415] print_req_error: I/O error, dev loop0, sector 640 [ 991.433516] Buffer I/O error on dev loop0, logical block 80, lost async page write 01:18:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x68000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c56bf, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:42 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:42 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x50, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:43 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8302000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0245628, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:43 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000180)) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c03000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x44000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:43 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0185648, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x11000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc044565d, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:43 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) r1 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:43 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:43 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x900, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:43 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x402c5828, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:43 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="231a8a9574e65e86371b75895ad4541720b57fe1f8694f338653cf586ae184fcdec8266688a0c01ab18a2261b0f9c5afff35b00dc60a499cb760bfb5bb505bdca02ed757202f469e99b1e381fa1fbf7a38cc9e227692661ea5dabedf0258cfaa83dc98341d04b8889469271b4cfa3722e45c7d54ab200f69c152263f76420a094a013e3f2406b6b1a0", 0x89, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3601000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 992.817321] print_req_error: I/O error, dev loop0, sector 128 [ 992.823435] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 992.858222] futex_atomic_op_inuser: 8 callbacks suppressed [ 992.858233] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:44 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:44 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6000000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc058560f, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 992.940712] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x500000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:44 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x246, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:44 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8302}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 993.204650] print_req_error: I/O error, dev loop0, sector 168 01:18:44 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x5600000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:44 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0f8565c, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ba, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:44 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x80785659, &(0x7f00000000c0)={0x0, 0x34343459}) [ 993.546141] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 993.742603] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6c00, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:45 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:45 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:45 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 994.094382] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 994.201033] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 994.304912] print_req_error: I/O error, dev loop0, sector 728 [ 994.310860] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 994.319626] print_req_error: I/O error, dev loop0, sector 720 [ 994.326070] Buffer I/O error on dev loop0, logical block 90, lost async page write [ 994.334467] print_req_error: I/O error, dev loop0, sector 14160 [ 994.340590] Buffer I/O error on dev loop0, logical block 1770, lost async page write [ 994.349516] print_req_error: I/O error, dev loop0, sector 0 01:18:45 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x2700000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:45 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7400, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:45 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x802c560a, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:45 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf201000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 994.581451] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x4030560b, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:45 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc0045627, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 994.790717] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 995.509927] print_req_error: I/O error, dev loop0, sector 17416 [ 995.516221] Buffer I/O error on dev loop0, logical block 2177, lost async page write [ 995.531890] print_req_error: I/O error, dev loop0, sector 144 [ 995.537872] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 995.549805] print_req_error: I/O error, dev loop0, sector 0 01:18:46 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6f000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:46 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x34343459}) 01:18:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x400000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:46 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfdfdffff, 0x34343459}) 01:18:46 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfdfd, 0x34343459}) 01:18:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:47 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4a00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 995.915413] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:47 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffe7, 0x34343459}) 01:18:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 996.032997] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfffffffffffffdfd, 0x34343459}) [ 996.144091] [ 996.145768] ====================================================== [ 996.152081] WARNING: possible circular locking dependency detected [ 996.158403] 4.20.0-rc1+ #231 Not tainted [ 996.162460] ------------------------------------------------------ [ 996.168791] syz-executor2/8636 is trying to acquire lock: [ 996.174328] 000000002b189206 (&bdev->bd_mutex){+.+.}, at: blkdev_reread_part+0x1e/0x40 [ 996.182407] [ 996.182407] but task is already holding lock: [ 996.188382] 00000000db8a16f1 (&lo->lo_ctl_mutex#2){+.+.}, at: lo_compat_ioctl+0x11b/0x170 [ 996.196715] [ 996.196715] which lock already depends on the new lock. [ 996.196715] [ 996.205034] [ 996.205034] the existing dependency chain (in reverse order) is: [ 996.212649] [ 996.212649] -> #2 (&lo->lo_ctl_mutex#2){+.+.}: [ 996.218729] __mutex_lock+0x166/0x16f0 [ 996.223142] mutex_lock_nested+0x16/0x20 [ 996.227725] lo_release+0xa3/0x1f0 [ 996.231782] __blkdev_put+0x4f6/0x830 [ 996.236105] blkdev_put+0x98/0x540 [ 996.240161] blkdev_close+0x8b/0xb0 [ 996.244309] __fput+0x385/0xa30 [ 996.248109] ____fput+0x15/0x20 [ 996.251907] task_work_run+0x1e8/0x2a0 [ 996.256320] exit_to_usermode_loop+0x318/0x380 [ 996.261424] do_syscall_64+0x6be/0x820 [ 996.265838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.271540] [ 996.271540] -> #1 (loop_index_mutex){+.+.}: [ 996.277371] __mutex_lock+0x166/0x16f0 [ 996.281777] mutex_lock_nested+0x16/0x20 [ 996.286360] lo_open+0x1b/0xb0 [ 996.290070] __blkdev_get+0x360/0x13c0 [ 996.294475] blkdev_get+0xc1/0xb50 [ 996.298534] blkdev_open+0x1fb/0x280 [ 996.302769] do_dentry_open+0x499/0x1250 [ 996.307353] vfs_open+0xa0/0xd0 [ 996.311153] path_openat+0x12bc/0x5150 [ 996.315558] do_filp_open+0x255/0x380 [ 996.320518] do_sys_open+0x568/0x700 [ 996.324746] __x64_sys_open+0x7e/0xc0 [ 996.329069] do_syscall_64+0x1b9/0x820 [ 996.333478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 996.339179] [ 996.339179] -> #0 (&bdev->bd_mutex){+.+.}: [ 996.344906] lock_acquire+0x1ed/0x520 [ 996.349225] __mutex_lock+0x166/0x16f0 [ 996.353634] mutex_lock_nested+0x16/0x20 [ 996.358216] blkdev_reread_part+0x1e/0x40 [ 996.362887] loop_reread_partitions+0x163/0x190 [ 996.368076] loop_set_status+0xb95/0x1010 [ 996.372746] loop_set_status_compat+0xa4/0xf0 [ 996.377759] lo_compat_ioctl+0x13a/0x170 [ 996.382344] compat_blkdev_ioctl+0x3ca/0x1b30 [ 996.387356] __ia32_compat_sys_ioctl+0x20e/0x630 [ 996.392630] do_fast_syscall_32+0x34d/0xfb2 [ 996.397472] entry_SYSENTER_compat+0x70/0x7f [ 996.402389] [ 996.402389] other info that might help us debug this: [ 996.402389] [ 996.410532] Chain exists of: [ 996.410532] &bdev->bd_mutex --> loop_index_mutex --> &lo->lo_ctl_mutex#2 [ 996.410532] [ 996.421906] Possible unsafe locking scenario: [ 996.421906] [ 996.427963] CPU0 CPU1 [ 996.432626] ---- ---- [ 996.437282] lock(&lo->lo_ctl_mutex#2); [ 996.441338] lock(loop_index_mutex); [ 996.447649] lock(&lo->lo_ctl_mutex#2); [ 996.454220] lock(&bdev->bd_mutex); [ 996.457933] [ 996.457933] *** DEADLOCK *** [ 996.457933] [ 996.464005] 1 lock held by syz-executor2/8636: [ 996.468579] #0: 00000000db8a16f1 (&lo->lo_ctl_mutex#2){+.+.}, at: lo_compat_ioctl+0x11b/0x170 [ 996.477347] [ 996.477347] stack backtrace: [ 996.481849] CPU: 1 PID: 8636 Comm: syz-executor2 Not tainted 4.20.0-rc1+ #231 [ 996.490005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.499351] Call Trace: [ 996.501955] dump_stack+0x244/0x39d [ 996.505589] ? dump_stack_print_info.cold.1+0x20/0x20 [ 996.510780] ? vprintk_func+0x85/0x181 [ 996.514672] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 996.520384] ? save_trace+0xe0/0x290 [ 996.524110] __lock_acquire+0x3399/0x4c20 [ 996.528264] ? task_numa_migrate+0x28d0/0x28d0 [ 996.532957] ? trace_event_raw_event_lock_acquire+0x440/0x440 [ 996.538859] ? mark_held_locks+0x130/0x130 [ 996.543107] ? native_smp_send_reschedule+0x6c/0xa0 [ 996.548129] ? zap_class+0x640/0x640 [ 996.551847] ? resched_curr+0x164/0x1f0 [ 996.555832] ? zap_class+0x640/0x640 [ 996.559557] ? zap_class+0x640/0x640 [ 996.563288] ? find_held_lock+0x36/0x1c0 [ 996.567357] ? try_to_wake_up+0x11c/0x1490 [ 996.571600] ? lock_downgrade+0x900/0x900 [ 996.575841] ? lock_downgrade+0x900/0x900 [ 996.579994] ? zap_class+0x640/0x640 [ 996.583709] ? trace_hardirqs_off+0xb8/0x310 [ 996.588123] ? kasan_check_read+0x11/0x20 [ 996.592270] ? do_raw_spin_unlock+0xa7/0x330 [ 996.596679] ? trace_hardirqs_on+0x310/0x310 [ 996.601090] ? do_raw_spin_trylock+0x270/0x270 [ 996.605673] ? lock_pin_lock+0x350/0x350 [ 996.609743] lock_acquire+0x1ed/0x520 [ 996.613552] ? blkdev_reread_part+0x1e/0x40 [ 996.617875] ? lock_release+0xa00/0xa00 [ 996.621853] ? perf_trace_sched_process_exec+0x860/0x860 [ 996.627304] ? mark_held_locks+0x130/0x130 [ 996.631539] ? depot_save_stack+0x292/0x470 [ 996.635871] ? blkdev_reread_part+0x1e/0x40 [ 996.640192] __mutex_lock+0x166/0x16f0 [ 996.644081] ? blkdev_reread_part+0x1e/0x40 [ 996.648400] ? blkdev_reread_part+0x1e/0x40 [ 996.652722] ? unwind_get_return_address+0x61/0xa0 [ 996.657655] ? mutex_trylock+0x2b0/0x2b0 [ 996.661723] ? zap_class+0x640/0x640 [ 996.665439] ? print_usage_bug+0xc0/0xc0 [ 996.669511] ? autoremove_wake_function+0xe3/0x370 [ 996.674446] ? print_usage_bug+0xc0/0xc0 [ 996.678512] ? find_held_lock+0x36/0x1c0 [ 996.682581] ? mark_held_locks+0xc7/0x130 [ 996.686731] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 996.691840] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 996.696955] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 996.701547] ? trace_hardirqs_on+0xbd/0x310 [ 996.705873] ? kasan_check_read+0x11/0x20 [ 996.710019] ? __wake_up_common_lock+0x1d0/0x330 [ 996.714780] ? trace_hardirqs_off_caller+0x310/0x310 [ 996.719885] ? percpu_ref_resurrect+0x2f0/0x4b0 [ 996.724562] ? trace_hardirqs_off_caller+0x310/0x310 [ 996.729674] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 996.734778] ? __wake_up_common_lock+0x1d0/0x330 [ 996.739547] mutex_lock_nested+0x16/0x20 [ 996.743607] ? mutex_lock_nested+0x16/0x20 [ 996.747843] blkdev_reread_part+0x1e/0x40 [ 996.751996] loop_reread_partitions+0x163/0x190 [ 996.756666] ? __loop_update_dio+0x6b0/0x6b0 [ 996.761078] loop_set_status+0xb95/0x1010 [ 996.765229] loop_set_status_compat+0xa4/0xf0 [ 996.769725] ? loop_set_status+0x1010/0x1010 [ 996.774145] lo_compat_ioctl+0x13a/0x170 [ 996.778207] ? lo_ioctl+0x1d60/0x1d60 [ 996.782007] compat_blkdev_ioctl+0x3ca/0x1b30 [ 996.786502] ? bfq_create_group_hierarchy+0x120/0x120 [ 996.791702] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 996.796286] ? bfq_create_group_hierarchy+0x120/0x120 [ 996.801473] __ia32_compat_sys_ioctl+0x20e/0x630 [ 996.806236] do_fast_syscall_32+0x34d/0xfb2 [ 996.810563] ? do_int80_syscall_32+0x890/0x890 [ 996.815145] ? entry_SYSENTER_compat+0x68/0x7f [ 996.819731] ? trace_hardirqs_off_caller+0xbb/0x310 [ 996.824751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.829592] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.834448] ? trace_hardirqs_on_caller+0x310/0x310 [ 996.839468] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 996.844486] ? prepare_exit_to_usermode+0x291/0x3b0 [ 996.849507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 996.854356] entry_SYSENTER_compat+0x70/0x7f [ 996.858761] RIP: 0023:0xf7ff1a29 [ 996.862133] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 996.881031] RSP: 002b:00000000f5fed0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 996.888740] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c02 01:18:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x1000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 996.896006] RDX: 0000000020000480 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.903277] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.910546] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 996.917815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.933113] loop_reread_partitions: partition scan of loop0 (Œðåž:?öøEÚŸs…6·løõìãÛë XÔs%%&W;¾À±­S*l4—ñZv2r¨ì±N°‹ö_ï) failed (rc=-13) [ 996.983338] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 996.989815] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 997.019158] kobject: 'loop4' (0000000077080003): kobject_uevent_env 01:18:48 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:48 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfdfdffff00000000, 0x34343459}) [ 997.032427] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea03, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 997.082444] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.091217] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.122472] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 01:18:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x4800, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:48 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1b00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 997.144307] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 997.152586] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 997.182827] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env 01:18:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfdfdffffffffffff, 0x34343459}) [ 997.211022] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 997.239456] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe7ffffffffffffff, 0x34343459}) [ 997.258042] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 997.269485] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.289231] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 997.320889] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 997.348946] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ec, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 997.374028] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.396674] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffe7, 0x34343459}) [ 997.416012] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.429751] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa03000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 997.465353] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.484311] print_req_error: I/O error, dev loop0, sector 640 [ 997.490275] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 997.500028] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x74, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:48 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 997.577860] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.591165] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 997.597896] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.622381] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 997.647468] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 997.669074] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 997.687952] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.704988] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.722738] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 997.734699] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 997.759894] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 997.782847] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 997.882384] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 997.890156] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:49 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0xd, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe7ffffff, 0x34343459}) 01:18:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec03000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:49 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x1881800, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x60000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 997.925945] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 997.954081] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 997.969190] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe7ff, 0x34343459}) [ 997.984962] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 997.987705] futex_atomic_op_inuser: 6 callbacks suppressed [ 997.987714] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 998.001662] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 998.026766] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:18:49 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe7, 0x34343459}) 01:18:49 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x4700000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46020000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 998.102749] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.110377] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.142739] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xfffffdfd, 0x34343459}) [ 998.150361] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 998.171171] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.179320] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 998.187791] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.198596] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 998.220082] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 998.227693] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 998.241600] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 998.307180] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.336101] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.356237] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 998.361771] print_req_error: I/O error, dev loop0, sector 1264 [ 998.363890] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 998.368693] Buffer I/O error on dev loop0, logical block 158, lost async page write [ 998.399937] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.404553] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 998.409939] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.417272] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 998.472511] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.480133] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:49 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xffffffffffffffe7, 0x34343459}) 01:18:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6602, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xa000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:49 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6a00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 998.517713] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 998.552582] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' 01:18:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315559}) [ 998.556783] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.576244] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 998.583988] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 998.589534] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35c, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 998.614502] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.614646] print_req_error: I/O error, dev loop0, sector 0 [ 998.658783] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 998.668938] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 998.738050] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.756037] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.762481] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 998.800217] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.813428] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.827604] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 998.835259] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 998.892864] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.900459] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 998.920162] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env 01:18:50 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000, 0x2]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3631564e}) 01:18:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x126, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:50 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x62000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x68, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 998.936433] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 998.957199] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 998.987371] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 998.997705] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 999.012589] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.022963] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 999.029950] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 999.052296] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 999.076552] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 999.091556] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 999.103131] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.110230] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 999.115131] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.123498] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 999.152492] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 999.172355] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.182158] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.272445] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.280079] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.296299] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 999.311975] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 999.336738] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 999.345005] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' 01:18:50 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x59565955}) 01:18:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:50 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x700000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:50 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7f00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 999.470663] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 999.492811] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 999.507380] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x4f565559}) 01:18:50 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464", [0x8000]}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 999.514766] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.531584] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 999.549465] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 999.561131] print_req_error: 1 callbacks suppressed [ 999.561140] print_req_error: I/O error, dev loop0, sector 0 01:18:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe01, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:50 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464"}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x32315659}) [ 999.595356] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 999.631036] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 999.661838] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 999.678052] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 999.690227] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 999.705753] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:50 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x59555956}) [ 999.709450] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 999.712219] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.719393] print_req_error: I/O error, dev loop0, sector 2576 [ 999.770797] print_req_error: I/O error, dev loop0, sector 3600 [ 999.791353] print_req_error: I/O error, dev loop0, sector 4104 [ 999.799831] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 999.810045] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 999.812498] print_req_error: I/O error, dev loop0, sector 5128 [ 999.842794] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 999.854642] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 999.865199] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.871647] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.906603] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.926778] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 999.937167] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 999.952413] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 999.974066] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 999.980595] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1000.035821] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1000.052370] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' 01:18:51 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2601, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:51 executing program 2: socket$inet(0x15, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000015c0)=""/65) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x6, 0x12, 0x0, 0x0, "8cf0e59e3a108f3ff6f81f45da9f7319859d36b76cf8f5ece3dbeb201158d47325250626573bbec0b18fad532a6c349704f15a763272a8ecb14eb08bf65fef98", "ace11255940597aa69f8bbcdb3e0da57942e6146b79f0e62b24f0012e5a84464"}) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) 01:18:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x56595559}) 01:18:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x300000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:51 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7b00000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 1000.376447] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1000.405019] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:51 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x6200000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3132564e}) [ 1000.419775] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1000.428375] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1000.449360] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1000.463185] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env 01:18:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50565559}) [ 1000.485338] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' 01:18:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c03, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1000.526998] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1000.535745] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1000.545278] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:51 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1000.581456] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1000.595273] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1000.605633] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1000.612976] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1000.649624] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1000.677000] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:18:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x55595659}) [ 1000.704250] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1000.715820] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1000.767432] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1000.790675] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1000.813652] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1000.826677] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1000.836854] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1000.854025] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1000.875907] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1000.886846] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1000.904849] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1000.925151] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:18:52 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x74000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:52 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x7200, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3432564e}) 01:18:52 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1001.200768] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1001.225636] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1001.232194] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1001.232310] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x50323234}) 01:18:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3136564e}) 01:18:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xffffff7f, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 1001.348147] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1001.357709] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1001.365900] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:52 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1001.401887] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1001.413343] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1001.433067] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1001.452616] print_req_error: I/O error, dev loop0, sector 0 [ 1001.482051] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1001.484841] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:52 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3231564e}) [ 1001.499029] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1001.511594] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1001.572506] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1001.580134] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1001.594495] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1001.600958] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1001.621424] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1001.641197] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1001.664444] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1001.692901] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1001.712713] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1001.719174] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:18:53 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:53 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xfffffffffffffff0, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a02000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x700, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x3234564e}) 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xe7ffffffffffffff}) [ 1001.830379] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1001.863923] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1001.885346] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1001.900963] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfdfdffff}) 01:18:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1001.954744] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1001.962682] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1001.970511] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1001.983102] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 1002.029626] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1002.062240] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1002.062931] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1002.089370] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1002.109185] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1002.141187] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1002.152821] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.154396] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1002.194617] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1002.212470] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' 01:18:53 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xe7ffffff}) 01:18:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:53 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x14000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 1002.242550] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1002.249318] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.273699] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env 01:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea030000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1002.289317] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1002.309426] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1002.330597] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfdfd}) 01:18:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6000000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 1002.335880] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1002.356104] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1002.363720] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.366096] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1002.383784] print_req_error: I/O error, dev loop0, sector 0 01:18:53 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1002.410039] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1002.424209] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1002.440076] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1002.452809] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xe7}) 01:18:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf503, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1002.460450] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1002.483004] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x6c00000000000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xffffffffffffffe7}) [ 1002.516058] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1002.540701] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.592633] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1002.599109] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.620695] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1002.642665] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1002.660633] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1002.680371] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1002.699381] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1002.709351] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1002.723591] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1002.734487] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1002.747798] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1002.756549] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1002.771661] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1002.778956] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:54 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfdfdffffffffffff}) 01:18:54 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x38000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x2000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) [ 1003.071479] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1003.099253] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfdfdffff00000000}) [ 1003.121046] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1003.148187] futex_atomic_op_inuser: 12 callbacks suppressed [ 1003.148196] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1003.159271] print_req_error: I/O error, dev loop0, sector 0 [ 1003.167917] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1003.194488] print_req_error: I/O error, dev loop0, sector 0 [ 1003.200267] Buffer I/O error on dev loop0, logical block 0, async page read [ 1003.209833] print_req_error: I/O error, dev loop0, sector 4 01:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1be, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1003.215653] Buffer I/O error on dev loop0, logical block 1, async page read [ 1003.247091] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1003.260319] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1003.269199] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' 01:18:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xffffffe7}) [ 1003.292689] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1003.330580] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1003.382672] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1003.389153] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1003.407667] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x7a, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1003.439059] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1003.458519] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1003.466274] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1003.488360] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1003.502561] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1003.507691] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1003.522643] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1003.529248] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1003.554027] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1003.582361] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1003.596648] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env 01:18:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4602000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xffe7}) 01:18:54 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x14, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:54 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83020000}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1003.604198] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1003.618688] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1003.628567] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1003.642345] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1003.674025] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1003.688138] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1003.688509] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xe7ff}) 01:18:54 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1003.753604] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1003.754713] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1003.760070] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1003.763348] Buffer I/O error on dev loop0, logical block 0, async page read [ 1003.786464] Buffer I/O error on dev loop0, logical block 1, async page read 01:18:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0xffffff7f00000000, &(0x7f0000000000), &(0x7f0000000080), 0xa1f3ffff) 01:18:55 executing program 2: socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) [ 1003.818048] Buffer I/O error on dev loop0, logical block 0, async page read [ 1003.825897] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1003.836619] Buffer I/O error on dev loop0, logical block 1, async page read [ 1003.854220] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' 01:18:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfffffdfd}) 01:18:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0xfffffffffffffdfd}) [ 1003.902145] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1003.924653] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:55 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1003.999602] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1004.017637] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1004.039097] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1004.067264] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1004.087639] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1004.116268] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1004.134282] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1004.161254] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1004.179120] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1004.190177] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1004.206939] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1004.226949] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1004.262647] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1004.290122] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1004.460986] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1004.468690] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1004.520619] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1004.535798] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1004.565596] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1004.572134] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1004.638315] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1004.662361] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1004.672203] print_req_error: 5 callbacks suppressed [ 1004.672213] print_req_error: I/O error, dev loop0, sector 20344 [ 1004.683489] Buffer I/O error on dev loop0, logical block 2543, lost async page write [ 1004.691431] print_req_error: I/O error, dev loop0, sector 8 [ 1004.697527] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 1004.705473] print_req_error: I/O error, dev loop0, sector 0 01:18:55 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x800000000000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xfdfdffffffffffff}}) 01:18:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0xffffff7f00000000, 0xa1f3ffff) 01:18:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:55 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xe7ffffff}}) [ 1004.781099] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1004.799510] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xffe7}}) [ 1004.829571] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1004.840170] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1004.851121] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1004.861794] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1004.879565] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf403, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xe7ff}}) [ 1004.952515] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1004.959549] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1004.978987] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1005.008201] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.042730] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' 01:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x7a00000000000000, 0xa1f3ffff) 01:18:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1005.063388] print_req_error: I/O error, dev loop0, sector 0 [ 1005.086894] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.095961] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1005.107902] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.109847] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1005.152875] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.164493] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.186304] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env 01:18:56 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x71000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xfffffdfd}}) 01:18:56 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1005.218946] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program [ 1005.231191] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:56 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1005.270492] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1005.293258] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1005.307175] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xfffffffffffffdfd}}) [ 1005.318353] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.325018] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1005.346839] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xffffffffffffffe7}}) 01:18:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2010000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1005.379225] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1005.399903] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1005.413604] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.419278] futex_wake_op: syz-executor1 tries to shift op by -193; fix this program 01:18:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1005.433331] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.448125] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.456331] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.478818] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1005.489921] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' 01:18:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1005.531107] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1005.546765] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1005.566692] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.582223] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.596279] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.604570] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.617733] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env 01:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x3, 0xa1f3ffff) 01:18:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xfdfdffff00000000}}) 01:18:56 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0x29000000, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 01:18:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1005.625359] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1005.653738] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.660386] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.666963] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.676552] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.687882] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1005.695091] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1005.705071] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1005.711612] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1005.724904] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1005.733753] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1005.744001] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.751622] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.787644] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env [ 1005.805623] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1005.872547] kobject: 'loop3' (00000000abdea67e): kobject_uevent_env [ 1005.879017] kobject: 'loop3' (00000000abdea67e): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1005.902637] kobject: 'loop1' (0000000093d331d7): kobject_uevent_env [ 1005.909113] kobject: 'loop1' (0000000093d331d7): fill_kobj_path: path = '/devices/virtual/block/loop1' 01:18:57 executing program 4: clock_getres(0x1, &(0x7f0000000380)) socket$vsock_stream(0x28, 0x1, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), &(0x7f0000000180)=0xf3) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x283}, &(0x7f0000000140), &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:18:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xe7ffffffffffffff}}) 01:18:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd003, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:18:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) futex(&(0x7f0000000100), 0x85, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x7, 0xa1f3ffff) 01:18:57 executing program 3: r0 = socket$inet(0x15, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0xfffffffffffffe64) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={@mcast2, @mcast2, @loopback, 0x7, 0x101, 0x0, 0x0, 0x0, 0x40}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)) r4 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1881806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) read(r1, &(0x7f00000005c0)=""/4096, 0x1000) sendfile(r1, r1, &(0x7f0000000240)=0xd00, 0x2000005) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 1006.007820] kobject: 'loop4' (0000000077080003): kobject_uevent_env [ 1006.018733] kobject: 'loop4' (0000000077080003): fill_kobj_path: path = '/devices/virtual/block/loop4' 01:18:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0xa71, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34343459, 0x0, @discrete={0xffffffe7}}) 01:18:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 01:18:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1006.079448] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env [ 1006.088780] kobject: 'loop2' (00000000cf22a144): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1006.112715] kobject: 'loop0' (00000000d16c3c74): kobject_uevent_env 01:18:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 1006.130209] kobject: 'loop5' (00000000c76c6e95): kobject_uevent_env [ 1006.139365] kobject: 'loop5' (00000000c76c6e95): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1006.142461] kobject: 'loop0' (00000000d16c3c74): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1006.157201] kobject: 'loop2' (00000000cf22a144): kobject_uevent_env