INUX7(r1, 0x541c, &(0x7f0000000400)={0x7, 0x4bd}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x43b1}) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="070661822a5118858aa944fc70da3ea85a4c66", 0x13}, {&(0x7f0000000280)="6d4d42bc5abc42c3177bb258884f758db82111cd8879b3046c720b03e5d418c0d867eee68c4a96be8444cd4ab12cfd56f6d4ab7e0678a2eabeac848e829cb9b5992685d38e7c65301dc1eb53dd488b0fcf111450f891d5144b7da1f43a1c7100aa00147df23ce2720cf8cc22bb9dd050de7d909dded59264f57d6737bae9c428cac7cfc7a6cfff39c3eef0b5b9862e8ebf51946517ce408901e64e4a9026b1de6833023550589ffe07a29383a1d7dacf07eb6baf40936717e2b8a4276624b8b275", 0xc1}, {&(0x7f0000000380)="a5be0c9534fdd235777b00010a5dc99cbd3195bc1bf788", 0x17}], 0x3, 0x5a) lookup_dcookie(0x0, &(0x7f0000000440)=""/174, 0xae) 03:33:54 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = memfd_create(&(0x7f0000000000)='lo\x00', 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xb}}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={r2, 0x1, 0x7, 0x3}, &(0x7f0000000280)=0xfde9) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="09006500427c93ccd922c52b5ea9c8fa4008b9fbf4f64347a5e365f2092d0f6817774d1c0555c70aa9b3920f7e1a59da63270983e25466f24483e69f46caef5a93a96f724aaa91e5fa7f33ab383be73faad1cc356de842886a26e7bdf4c7b42db3b8fdca7cfb1f8b3fd5579ab66f2a2b53b291f1"], 0x6d) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0xffffffffffffff21) 03:33:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback=0x7f000001}, 0x0, 0x3, 0x1, 0x4}}, 0x26) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x6}}}, 0x32) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xd17, 0x202140) write$P9_RREMOVE(r1, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) 03:33:54 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) eventfd(0x4) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:33:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0xb}, 0x7, 0xfffffffffffffffd, 0x8, 0x0, 0xfaa, 0x0, r1}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmsg$netlink(r0, &(0x7f0000007940)={&(0x7f0000000240)=@kern={0x10}, 0xc, &(0x7f00000077c0), 0x0, &(0x7f00000078c0)=[@rights={0x10, 0x11a, 0x1}], 0x10}, 0x0) 03:33:54 executing program 4: accept$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge0\x00', 0x1ff}) 03:33:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x7fe) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x7, 0x3, 0x3}) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000001c0)) 03:33:54 executing program 1: r0 = socket$inet(0x10, 0x2000000000002, 0x2000000000000000) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = msgget(0x2, 0x621) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000004c0)=""/79) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000180)='user.syz\x00', 0x8, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000004fc0)=@known='user.syz\x00', &(0x7f0000005000)=""/171, 0xab) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000001640)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x7, 0x8, 0x7, 0x4}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="a0bd77000000000000040095ccd7311969de8f36125c69b19c0256a250dbbba34aa6ff408f03b9b360b2f8b20a5969e1c84218c297267f69eedc249140310bc836a5d9f87e72d07c2f08381c46af98398c585b530d0dd3716d7a8611986c1bd7b46e3a596b79000000"], 0x7f) write(r3, &(0x7f0000000540)="0248b6ae3ce291b5b45415bd7828d9a9160f6b745556ac5e41485087d6c306c9a21bace6f119f5124456878d24f575ddc376a1cec15e8f5d9854253d1313dac1b695de9ef8602befc7f68f366f90d20881f87d8f9d8347cc9fd2cac7b1ab89871fa5e782bd7d353498d0807d7e76f3e405d88cd2dabbabe1b8caf47f7a0267d29500459ddc93e2429a9a4317cfdfeb46e85c02b07cf20986ea135fa138893cba10127eba66675b2019c29e7bcc6639c74a9f726ce426e0f650c92bcfdac559116df3a702467e42291d32b80401359e0e3aefae019ac2c0c01c505f1787796a6158a7e2789c9b50caf3a031df0c5a8de119e48f4cbead1537a8552a06febc884f35a34127c9cbc67e038bf4fb1cfa17ab8dde6a16db8f64f7d917fd0b43ff0a8b2ac31541a57199773601338331baa111366167c00bb6b63b9a20cc300773e3bdf6410e29682434027ac446762118a54839bc7774c9ee5312b743b35d53d5e3caf743f44aec8738d8fc15da0553c84839c2f9921ba3b801b354370ee9a8c67be541065039353afd09314b5f01e098ce3e04af6a242c12a63eac4b36466d722fc6018ca6a9afbd810c409d731299eb939624f1dbc1d329ff819f82c32233cdf9055b5057727af68ecb6d3fa54f611af764daa39881fac4f013a6653af02148e43721fab6e784f31d14ce2a24d18501007bf9c5c3b9ac0bd5aa366c3647bf34a626b1f3461455da2ed6760c80afcba913993e92c158453a36848bf1e86b8d950009875902b0d79aa1588c54e145e0e83dbae5bef4b1a6f044e7bf1781eb2162610f3a2a8c776c5bd7e1cbb31ca22daf3035facbd2aeb9620935c6b077c2714919a891ef6ab4565ba30766cd012c862d7ffada62b84aa098e679204d9db0c85992ea546ee0843498cb4609dcc432df1ea43e5ce3d51298c597955e57887215bb5a84d4e34d628458016e353b81a6d63f7ab1be7e1c442cf78a20de0b6525be2373b23b0c73983e085e985220ff429826b2ffdee722322e25d8479561be2052c9ed8d651f407515dd078baeea7c0acf0c8ecc9324aa32d98d7a07272ecb5d5ac1bc108e777f2921072bee6cd4e802aef8fbf1c623602a3b35d07ea0a2dc5a7425ba808ce69507d7886454b643f6eaa02ca43bf9355b9c72985bbea9eb6c68bf4b499561c837914df7bb3787f1f68e46ae447bf4ca774a2481938037f5ba1b5fb6ff65d83bf29b7980e10dc1baab93bd88f4a786fb064644ba527d1e63d8452b90b9a9bef0a45dbb3a0f1c7b54d0ce6a6a6bc84cbc2fec3bebd46566d50ccca5c2db9a7f6a0d3d37cdc7115aa4cdaa8aba0393414b571750d76ab9b2e899d57cba0a72f5b3c908cb65cf8636b910b9ed075c35acce27165140bbb2cf600aa808130cf3062e21586c2b2f0a92f5639fb82007f23cd0446d87bb1bb3d7e530e97dffd390593acd5af05b99baa59b416448ed57e001693853532089cb7130f61bd0a8fd57411d96da21c9013ebd45f13e756c899524256790ccc89c0bb9f13417328563c536af1cdf908fac29e8cdbcf169c0c6425a2581e39c22a1f1a4be39b6c2ecd4f56f3adecc2552580a8db7a586c4724f3df89a9438d6af046dffaa253929be927c0188acdde1e512ded200a9b92d684a9f68b2a24b4eff21cf33fd40f231cc7aa6f3d8349b4813cd9f1983783a7bd6f8d5665219c6a041028dc1d1673ff4a4629582ab00ad72f4dfd086b3141f03fbb4e4d4adfe6aa0b1dff0d3d369d91380f2b0a38c525caf1c86c58f9392e9c6ad5268d6db41ba1d03c18d611a67785a12a5dbd58a33c8c5892a50ef598b0628f7b0910f757efa517a7c77c60ac1ff87bb9f92ec7502775cb1b9dbeb70728f4182a8db3e6450c400f91097a07c65440763f9efb4659a7c6dd3544af536fc0424c152f7eae0e2f66c0b97d458b32a17b225d155b9da4fa3ebc7110dc68cc0e7aebede9a18d0651a02f6d1f8ac6a111aab7ef2dc248ea26cc13b04bab1f594c665cdfa8bb15d251e763ca4bcca3e68690576feac679f43ef420937a9c12a8b86a075486e706a23591ddb930495d49ed7f07b3cd01059ee9246814fc4476d6524c7e94be99189f24468c572fe335ff840afbca572d5790bb9a4afcd5a44a4a1d4447e483e6dd2798e488382ed9b9b6038aca147d1d3e3197887e5151b322fc5f2335ea6e6272da283a02f42dc39882f07c13269a545d87d495f2100b231d7c3af06e3f14b60148b53b71764883cf5187ba24e76ae0a60bcbcf02f03a28c031b1e640f5536c0f8d2223889872b30251f7904f752ab32b73bd25206c63c70991873040a06d3bef22ea2c47592823dbca79090ac151fb8aeaa86e303348f3e9ea88786351317018b1e6e345d46beace50cc64bc993303bce3cb6ae22668d89872fd229ccb959d1e983e012e3fbdb67fae04e73756ab7a84f3749ab76e620bb3a5a62493fb9356ba592c4424aee4e6e6da68ee25a654d723d67d3297aa444fedd1926a9fa5c0e2577c459b9c67f01588596d3a1be243b17a16ec1a115239c7013d5db0ea477ae24ecaab9b98a72d6ec996eb99696f3299227da15787fffc88f4da8320375173e5343431dfb3e11d3859bb0d62ff99494d8b3713b703dddf31ccfdfde28f4b64d8a4b1adac0b2bc64bdf47c763109ea2bc1f3c197ab62da7685bb2c4870b4896120b1b18d4cce7e8c463198a02fa49df348c0698a547d507ef3b04be913388754840873aa7ff49ad40ba4e2b0ea8025c87c9c078c4288a83cf4a8ea30889dc17d111dc5a9c146f7be41b49ee2f8fa217334208c6fa823f1c16727e28e0d511083870e69393f7d6f928acd5405e13c1cddc30d11540046059f4302330c5bdce617aa985cdd0fce366e8267461e9ca8a7c3ad69660763f16f402be40c3648e92c95a63bfa8c9d3419b9700eebc6564b758708127ef03a084eba4451be36a3e27f84b2846b42daea7e3327888e58efa8e8edb75ffde7cdc8995677276ff454773701675142b9bff22a788f7c078b8070c68930a3c4a2bfd5cdee9383e6afd4d7f01258637761c7ed3e13ffb4c3ed7bda5ace3a9efb10ae4c80af630ae09f8420f0fe07d41420a2b8058d740b2bee3789e692b541c564da829627d827c347bf40b7e5c14ebe3f15c9b4d8611321ee28da48f4344cf017b0888267585928a3edfecddf6562c350e43aa62f7e0fb8723b2371c83232944d3d740cae303354db3bf5531e68e27c45b24704b28550c97ed6ef0d21e5e74f0b00755bc0f6b2396fea560178ad314979eb5fccd63a0b337facb3a1d5e4dd84a6038355d5f4ca7134060f80e02c9bd7c13b2857bd27eae0a090082ff2c21a5795bd7e2e7c1040ae37524bb60e647cb8b7ae4dc9f2dc0dfa11b379b34fa3d613e3cee28e9b8b6458162ff71eea75da5c7e2c32acba88023d7d45c700823a3378efe1c6b5ce60a7e7c6639319ad127dbcf64fc020064a14e00f9818b5c9b1780f845e7fac225c53ea53e3eed670ded01b851696e7541b549df551a96b78d883e669a2ef4039938e5c92a3b13b69a5e6d93ce52e14c999f1fa57478af116a0cfed17ce35b999dfcaf9ccaac278f5d1a5dd1341d849175213e33e5b60bed0ba706ebfce5a83f85b6f81521b976d1e3faa901051f7349c759495316a0bc9369939a0f19cdc2034fe1d9a40d1bc3629e34e17c4237216e0a248d0527122ed44ee3defd70741c89ac05af63c7d771fd98b1ef76664f4ecb1e4565f4bdff90f6478cb831ca81d8df5d6e84443fadf0e598b9d62b118e89cffaa762baf61a57f27fcf4cb97867becf00c4638e05fc54cb306a67653da5ffadd57eeffd66e4c80d00c106589bfe917972dba083587d01a1d1af332cf7789f73b9f63de6bc3aa780714a272db5be3857bd7010472cd41bcc4dc50e5ad57e0023fee567cd76dfd807507a0f6888966dd78d379917e783888f9eab4f08fd0d3c22da50ab9305591552d379709b796d8ff213e165aa27f1346801f79b084898333e40c7d5ea92c648ba16a2fc14098d45f8df69d38833038eb2f995c8a842c430c9f43b78fd5634285685c779c55382f204613f6240b48c54055266b83a11e0cf34deb8ad9cc2b8a9805c0da2af8dcbfb4e3641dc649a2e172bc95c1446f7b75f4c8010968f0f69cb5f3370f4465346dbd90c91bab31bfe286acc2d4b507c0dd3814daece7c8e98fb80ecd5d3b33d109dc0a1e06265222255be54dc5c713d788dbf3a528cbbbae3a20bef32ed700b1062483a0f77a0e62e294ede271209f0e079e0d7d147e4a3acdc3f6f8553fc6740daf63e6d51de06a86ab92f3c3964648a96c288cb48929972e013a72fa384e0e7cf61e81905e9c1f2c0233fe531d1f4e7e2c1a76dc0bab4cea8c1e0305e35273c9bdc773680f015a68cd3187446ca76fad9df87ef0f5800d214e8bfe867458b9e6dceb693c833a98db38560e398bdd2d8147735af635806c0695fbc5952b52fca1054ebd6cdcf56498a9d8af51eb7bf0115c2978f94f31556b170bf635b3e14b9ca9f2e59b4a39ad2cc699424ed467d84a4e5fd9996e1c53ac2675eab1abbd488878f96fd129643f0968432dc5c4a027bebbc0617d52054c3189d3b1d1e27031657eb1dce96bc69bbd94ab5c56dfefe94d05cefacba7dcb3e20a91e2ae08a71afbf7ab53b5f5de108681ca9c6ea91a256eea0652e6ac8b2deb57b8a3584d552f60419ae295e910fab24b1c2ea4c9afd806b895825ffb2246973316d5702e7803d3f9041c7a4ed8ec08af696fe8b33a337608ab1eef407dffdaded4d17eccf50d4d2570720f6f6db8961b383fee15442c7b1482f6226dd9cbed0970ed17f121b62da3858ab498b493b286b4747519b4d52f8612cb1c160859f03a13077192844f4f9e52c7b07d7f69419ab16881bae024583bedaa7571ad7c32952211dea30c97f9916156fda5b6e194024de06d53caca3bd66483489e54efd80e291d57bda160dca11fdd28c7f4e6beee1f95f5405ee5252d7fbb44da626251b0cbbba0bc145da6deceeaa5fd67be398ecc6597b5c885530fd2973a7ede6dc8954e28d8a17a230179090c7938ceb088d1a47e6a6c24de0a54e7c3ad51984b1a703f4a05a47bb5fd89588dfd6e5e05db851687f6103d7fa1e077199bc488a6b0ffa7bfafae2847e2daef803bcfab03ab6dd19767c4159f7a75b124fb39079bb9d18d33783d24c0229a951255bf8d05cd2107c30a373fa0e34719619660e59f20d18aba58c88d7d92f6f97bdb1e71712621c25874180231ed481c43bc308aa1b7cc9937dcd973c60143a52a2daf0a89b589a35c9cbcd18ede6deb578c7d11bc7790c7e30bc04f6bcf8a94d05f3d03ed98b0bd7b08d3adb2bc0619192c591d5ffecae45449d78cfb8f18131b057e888e28eaf31a8f07945eab06b76858c25013e5ae787e1154fd50fd4c7ea4c19fbee7d60cc214ec79c938dfc1da875e7e84003a5c827561db9d895cbc30d12f73ed56e0c5cc952af58dc9bacb832434d921400f6d67c48f9d2a38774c342d0e79d50e277a9c1568c9d49632e82dd52dc6fc965b64102ae5bdf475e11557470e0c33b9e7d5ff31fc27162a79b81df40d77052439e4f678f1833b1399e76493b06e4ded4f8940726d92fb03863e14e9bb581e4b4ffbf340246a254f575dbb2cb329e821bcf00c884d2106efda833ac798077af7922576bb4dbe72fe3164f7a0f04011c4432b053dfdc0957ef2e256b0e76896f328acb82f0e8c23fd510fcdca96acc25efaaf32660f29fce4377cc2888cb3faba244bfc", 0x1000) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@in6={0xa, 0x4e22, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x25}, {&(0x7f0000000180)=""/214, 0xd6}, &(0x7f0000000080), 0x40}, 0xa0) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0xf}, 0x6}}}, 0x32) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000001540)=""/162, &(0x7f0000001600)=0xa2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e21}}, 0x8000, 0x7fff}, &(0x7f0000000480)=0xffffffffffffffd8) 03:33:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x4000}) 03:33:54 executing program 7: read(0xffffffffffffffff, &(0x7f0000000280)=""/1, 0xfffffd25) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0xfffffffffffffffe) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x9) ioctl$TCSETS(r1, 0x5412, &(0x7f0000000180)={0x3}) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x16080, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f00000001c0)=0x8274) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @remote}, &(0x7f0000000140)=0xc) 03:33:54 executing program 4: fanotify_init(0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xffffffffffffff36, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_getneigh={0x0, 0x1e, 0x100, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r2, 0x40880, 0x60900}, [@IFLA_NUM_RX_QUEUES={0x0, 0x20, 0xfffffffffffffd24}, @IFLA_EVENT={0x0, 0x2c}, @IFLA_IFALIASn={0x0, 0x14}, @IFLA_LINK_NETNSID={0x0, 0x25, 0xffffffffffffff7f}, @IFLA_EVENT={0x0, 0x2c, 0x80}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "e92c69899aeaed1fa98e6e2c9b4e71d68302a46c0ecbf90348ac10205a1d"}, @IFLA_IFNAME={0x0, 0x3, 'ifb0\x00'}]}, 0x1c}, 0x1}, 0x0) 03:33:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x40}, 0x8) 03:33:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)={0x0, 0x0, [0x0, 0x0, 0xffffffffffffffff]}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x800, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x33, @broadcast=0xffffffff, 0x4e23, 0x3, 'lblc\x00', 0x20, 0x101, 0x29}, 0x2c) [ 314.610246] dccp_invalid_packet: P.Data Offset(80) too large [ 314.639285] dccp_invalid_packet: P.Data Offset(80) too large 03:33:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x7f00000000000000}) 03:33:55 executing program 5: ioprio_set$pid(0x3, 0x0, 0x2000) 03:33:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a000102040001000000000000000000511e0d7e10384b4b809543444cf6cf0b0ee28200884123d403eb0ed08c68c85dcdbff8862057ff040ec47498d962c6037fbcab6ad2c240596578c679bcd7a17b95505c5608111d6d54f9c049e8fdba9371766f52717c7b3f44859508efbbff99a3cd20364a7b441b"], 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:33:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) getpgid(r3) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0xcf, 0x8f, 0x80000000, 0x9, 0x0, 0x2, 0x1000, 0x1, 0xbd09, 0x2, 0x5, 0x80000001, 0x4, 0x3, 0x2, 0x7fff, 0x2, 0x8, 0x2, 0x3, 0x6, 0x1, 0x2, 0x2, 0xfc, 0x3, 0x0, 0x7, 0xffffffffffffffff, 0x3910, 0x401, 0x3, 0x9, 0x80, 0xffffffffffffffff, 0x7, 0x0, 0x5, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x8008, 0x0, 0x65, 0x3, 0x1d30, 0x5, 0x40}, r2, 0x10, r1, 0x0) dup2(r2, r4) write$cgroup_pid(r2, &(0x7f0000000080), 0x0) 03:33:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x4, 0xcb) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x31, 0x119, 0x0, 0x0, {0x4001}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @u32}]}]}, 0x20}, 0x1}, 0x0) 03:33:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getpgid(0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000001c0)="6e65742f69017d7000") ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000000)) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x3d1) 03:33:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x10002) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000d63a00010200000000000000000a0000006016cebc72c437dc982f64cc65ed178bebb2e7a7bc75c2bb05c5966ca1bb7000c3599d0bc71a2e8ef0ba503bfbc8d24250bab72f16c5c9146e396f56941f9b75aef7dd9aa2bba265ed8d27c1e7f0b2679d2130553a55d49c77791a21b5bb59229e8dc9d7fddd126dce5d2a4840eff4eea3c0237d"], 0x1}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8000, 0x30, 0x8000, 0xcf6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2, 0x6, 0x9, 0x1, 0x5, 0x2}, &(0x7f00000002c0)=0x14) 03:33:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="27f1000000001b83", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e74656772697434b9a9847b65", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r1 = accept4(r0, &(0x7f00000002c0)=@rc, &(0x7f0000000040)=0x80, 0x800) setsockopt$inet_dccp_buf(r1, 0x21, 0xcd, &(0x7f0000000140)="872cf456aefec97c0d4c596fee7e21602bfd768ad67afe9871b70ec4deb9a614b50cb84315c1d25a72ba1bc4b9d7fadbc90044a975ff07a0d455535c358caddfb3f906cf58ba9a23530d41fb5c62eb099dc5d00b03128a0b77295236c01d675659a3374ba97acf404730b66ac6163d458a041ea97464efa491a8922f783c43f6499a85213c8842cd3cfc0176457c8139768ed8", 0x93) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x40000000}) 03:33:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="0f5cc83d6d345f8f762070780f5d43c58ee6402a2ee4b8e1900db54bb292ab75b1e11039aa8a0ec4c0e5d3659344b4c02305e4a4e1c96ac4b400ac81036c9b6053fa730445234edab6d78b3307d85882e8f8c83979d96846a24c89ae83041653991e399d47dc86869117df74c75932d4cea4665ea192b5c9f39edf97b828a252866ce8b407a41d9c14c6d5414d14dd05fa3a346aa187b8cf56e7ff18bf17f973f9db20f160cda4edf87ddcc67150f867083f987524813189ce8e2fe9ec8a870309db7186aa1b308789ea1572305e89816ff1a13bebcd365f7744ef09600000008033bf82f2bb18b0752a1b6518d2f56f05304be501a375dc312bd23ee04d53219d524c72") rt_sigtimedwait(&(0x7f0000000000)={0xffffffffffffff86}, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) syz_read_part_table(0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000540)="9c5b1f191c0ffd8ec2bd99c337e7a0b0d796f05f164aa1edb4327d658f879152ad117306b8d51fd172a62bc05cf90f342697c53c9bf9794d193fc8165f0733fad483779e1307ac1e89af9012cebdde82e599632937b52770d71130d8738c39f1cd0a62bef197bc7f5dd46596635ecf23f3bfc701a4000ab127cd8bc09079b8d935bf8dd72019694b7039d1b6e8e42980fb023d6bcece394a5a7a09934d0ed71faf8b16011f360679021fa39aa397e9fcd4cd6a0ac8595ac951681a2061ccdee77843cbd0e040b88e44ffb41f57dc84aadc6f63cba4eb786bbf41674f99e1f61802e5541a482109f14336a3326159", 0xee, 0x100}]) fcntl$addseals(r0, 0x409, 0x2) [ 315.148627] netlink: set zone limit has 4 unknown bytes 03:33:55 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000002840)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000002940), 0x0, 0x0, 0x3d9}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4)={0x10}, 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11}]}, 0x15c}, 0x1}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@loopback, @rand_addr}, &(0x7f0000000200)=0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x3, @empty, 0x8}, {0xa, 0x4e22, 0xff20, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x7, [0x5fa2, 0x40, 0x0, 0x7, 0x6, 0x20, 0x2, 0x6]}, 0x5c) [ 315.322091] jfs: Unrecognized mount option "'ñ" or missing value [ 315.353363] jfs: Unrecognized mount option "'ñ" or missing value [ 315.364381] Dev loop4: unable to read RDB block 1 [ 315.369476] loop4: AHDI p2 p4 [ 315.372722] loop4: partition table partially beyond EOD, truncated [ 315.396118] loop4: p2 start 2020327233 is beyond EOD, truncated 03:33:55 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80001) write$FUSE_STATFS(r0, &(0x7f00000000c0)={0xffffffeb}, 0x60) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x4f55, 0x8200, 0x9, 0x4, 0x3f, 0x1b0, 0xb2, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, [0x5, 0x8001, 0x2a7648c5, 0x1ff, 0x200, 0x0, 0x82e3, 0xe80, 0x8, 0x0, 0x1, 0x9, 0x0, 0x2, 0x100000000]}, &(0x7f0000000240)=0x100) 03:33:55 executing program 1: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x400002) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0xffff}}, 0x100000000, 0x101, 0x6, 0x40, 0xfff}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x2}, 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x103002, 0x0) ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f0000000140)=0x4) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000000000/0x3000)=nil, 0x3000}, &(0x7f0000001080)=0x10) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'team_slave_0\x00', 0x3}) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, '/dev/input/mouse#\x00'}, {0x20, '/dev/vga_arbiter\x00'}], 0xa, "cb85ac14748d0b9713001d8f57c5b19a2d2cc072b1cf829b8c31bc9d01cabed4815c1dc726"}, 0x55) 03:33:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x3f000000}) 03:33:55 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='vboxnet0ppp0usereth0selinux[posix_acl_accesscgrouptrusteduser\x00', 0xffffffffffffff9c}, 0x10) ioctl$TIOCSBRK(r0, 0x5427) syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x7, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x5, {{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc4c85513, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f559391133c552dd1c76c6e91f68e364a3238b17109db386e75830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000), 0x26b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000200)) [ 315.497165] Dev loop4: unable to read RDB block 1 [ 315.502248] loop4: AHDI p2 p4 [ 315.505485] loop4: partition table partially beyond EOD, truncated [ 315.550554] loop4: p2 start 2020327233 is beyond EOD, truncated 03:33:56 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000187, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x3f00}) 03:33:56 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xfffffffffffffffe, 0x400000004, 0x40000000f728, 0x40800000000}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ppoll(&(0x7f0000000700)=[{r0}, {}, {r0}, {}, {}], 0x5, &(0x7f00000007c0)={0x0, 0x989680}, &(0x7f0000000800), 0x8) 03:33:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x9, &(0x7f0000ad2000), &(0x7f0000000080)=0x23c) mq_timedreceive(r1, &(0x7f0000000040)=""/23, 0x17, 0x100000001, 0x0) 03:33:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000200)={0x4f, 0x1, {0x3, 0x3, 0x20, 0x3, 0x7}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f00000001c0)={r2, r0, 0x7f}) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xc, 0x2, "9dd3b311"}, &(0x7f0000000100), 0x400) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bcsf0\x00', @ifru_names='ip6gretap0\x00'}) 03:33:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1000, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000100)=0x1000, 0x4) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x1, 0x80000000, 0x3, 0xe99c, 0x3, 0x266, 0x4, 0x3, 0x9, 0x47c35d59, 0x4}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5408, &(0x7f0000000140)) 03:33:56 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000b80)=[{&(0x7f0000000a80)=""/193}], 0x100000000000009b) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 03:33:56 executing program 3: r0 = socket(0x5, 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x100, @dev={0xfe, 0x80, [], 0x16}, 0x3}, @in6={0xa, 0x4e20, 0x926, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x81}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x18}, @in6={0xa, 0x4e20, 0x87, @dev={0xfe, 0x80, [], 0x1c}, 0x5}, @in6={0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x9}], 0xcc) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x8}) 03:33:56 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc), 0x1e1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) r1 = request_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='icmp6\x00', 0xfffffffffffffff8) keyctl$setperm(0x5, r1, 0x3000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x2, 0x8, 0x31, 0x7f, 0xfff, 0x1ff, 0xfffffffffffffffd, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x3}, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) sendto$inet6(r0, &(0x7f0000000840)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @dev={0xfe, 0x80, [], 0x19}}, 0x1c) close(r0) 03:33:56 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10) 03:33:56 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x9, 0x8000) ioctl$KDDELIO(r0, 0x4b35, 0x1000) r1 = socket$inet_sctp(0x2, 0x2000000000003, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0x5, &(0x7f00000000c0), 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)}, &(0x7f0000000080)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="79000000c90070e5e860fb39725578d0b60c48697d62a4046726df267b4447cdaf6fad3d0de9c0fbe61995a0b781d5166e3e283e2a21fba2fa50de131240ff1a499f4728a598f310a60edca3a0002b3f35b8ae45b2326af204b4a7c489238a94ed381d21ce343ff80aa6956f9566926c8d3822e0b8a2e53cb168b8f9f2"], &(0x7f0000000040)=0x81) r3 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x9, 0x40000) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={r2, 0x8}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2, 0x1f}, &(0x7f0000000140)=0x8) r4 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x0, 0x2001) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000400)={0x6, 0x1, 0xffffffff7fffffff, 0x100000000, 0x63, 0x1, 0x670, 0x2, 0x7, 0x9c7f, 0x10001}, 0xb) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) 03:33:56 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x7}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000200)=""/128, 0x80}], 0x3, 0x0, 0x0, 0x4}, 0x80) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f00000003c0)=0x1e) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000400)={0x4, 0x3, 0x1, 0xa6, 0x0, 0x1, 0xc0}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000004c0), 0x4) ioctl$RTC_UIE_OFF(r0, 0x7004) splice(r0, &(0x7f0000000500), r0, &(0x7f0000000540), 0x10000, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000580)=""/124) r1 = dup(r0) getsockopt$netlink(r1, 0x10e, 0x5, &(0x7f0000000600)=""/87, &(0x7f0000000680)=0x57) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup3(r1, r0, 0x80000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000006c0)=0x0) r4 = syz_open_procfs$namespace(r3, &(0x7f0000000700)='ns/net\x00') ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000740)={0x3f, {{0xa, 0x4e22, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x800}}}, 0x88) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000800)={0x0, 0xcaae, 0x30}, &(0x7f0000000840)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000880)={0x2, 0x200, 0x2, 0x4, r5}, &(0x7f00000008c0)=0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000900), &(0x7f0000000940)=0x4) fcntl$setstatus(r1, 0x4, 0x2000) tkill(r3, 0xd) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000980)={r6, 0x7, 0x10}, &(0x7f00000009c0)=0xc) rename(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00') fstat(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r7) pivot_root(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0/file0\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x2010, r0, 0x0) 03:33:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8, 0x1}}, 0x30) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x0) r3 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f00000000c0)) set_mempolicy(0x3, &(0x7f0000000180)=0xa1a0, 0xfffffffffffffff8) poll(&(0x7f0000000080)=[{r1}], 0x200000000000005b, 0x0) 03:33:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x3f00000000000000}) 03:33:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYPTR64], 0x1}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:33:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000002, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:33:57 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x600002) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x7}}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000280)={{0x0, 0x0, 0x1, 0x9, '\x00', 0x25b0}, 0x1, [0xd870, 0x1, 0x4, 0x1, 0x5, 0x4, 0x800, 0x0, 0x8, 0x6, 0x3, 0x0, 0x101, 0x1c9, 0xffff, 0x81, 0xd275, 0xc84, 0x7ff, 0x5890, 0x2, 0x64, 0x0, 0x2c1, 0x1, 0xb55, 0x1, 0xc7, 0x9, 0x7fff, 0xf0, 0x8001, 0x464, 0x5, 0xffff, 0xfffffffffffffffe, 0x4b, 0x6, 0x4, 0x8001, 0x1, 0x28, 0x20, 0x7, 0xffff, 0x3f, 0x0, 0x1, 0x9, 0x9, 0x5, 0x8000, 0x9, 0x26, 0x1000, 0x8, 0x1e4, 0xee4, 0x2, 0xd7, 0x1ff, 0x6ee, 0x3, 0x8001, 0x7, 0xfc, 0x7, 0x8, 0x80000000, 0x1, 0x1, 0x8000, 0x2f59, 0x81, 0x7f, 0x400, 0x400, 0x2, 0xba, 0x0, 0x1, 0x7, 0x8, 0x3, 0x6, 0x4, 0x9, 0x9, 0x4, 0xc139, 0x800, 0x6, 0x1f, 0xd773, 0xffff, 0x8000, 0x6, 0x2, 0x4, 0x2, 0xd7, 0x400, 0x9, 0x400, 0x3, 0x2, 0x7, 0x5, 0x7, 0x7, 0x1, 0x3, 0xdb, 0x100000000, 0x8, 0x8, 0x7, 0x4, 0x64f1, 0x1, 0x4, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0x7, 0x6], {0x77359400}}) clone(0x200, &(0x7f0000000780)="5685763c59ecd800959fb135b6005f9602599122b0655292", &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="92bd53a5e6e3f706486c4dd885b8a142d3b448917bcab6") r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r2) r3 = semget$private(0x0, 0x5, 0x21) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f0000000880)=""/52) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000008c0)='yeah\x00', 0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000900)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000, 0x1}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)={&(0x7f0000000940)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000009c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) inotify_init1(0x80000) openat$cgroup_procs(r0, &(0x7f0000000a00)='tasks\x00', 0x2, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000a40)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$KDSETLED(r0, 0x4b32, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000a80)={0x0, 0x56, "9b1292cfdf152f99f41b7953be2acc73c8a053a79f13d872e8ba183448e030362bf23b63a2734ef7ece35378f162eedd846c0554120d61c5fa1411fcbcfb8281dfd591b95be8b6568aae3c0666ef7fe4586de75d696b"}, &(0x7f0000000b00)=0x5e) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000b40)={r5, 0x2, 0x5}, 0x8) r6 = syz_open_dev$dspn(&(0x7f0000000b80)='/dev/dsp#\x00', 0x1000, 0x10002) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}, &(0x7f0000000c00)=0x10) r7 = syz_open_dev$dspn(&(0x7f0000000c40)='/dev/dsp#\x00', 0x3, 0x402) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000c80)={0xfffffffffffffffd, 0x7e0, 0x2, 0x9ab, 0x9, 0x9, 0x1000, 0x3, 0x1, 0x0, 0x9}, 0xb) semget$private(0x0, 0x3, 0x108) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000d40)={r5, 0xffff, 0xfffffffffffff7ab}, 0x8) 03:33:57 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x7, 0xb, 0x81}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl(r0, 0xfffffffffffffffa, &(0x7f0000000140)="ce5f9596151e2f45") r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 03:33:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000000000), 0xfec4, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x100}], 0x200000000000065d, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f0000000040), 0xfd6a) 03:33:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x800000000000000}) 03:33:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x7f000000}) 03:33:57 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(0xffffffffffffffff, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:33:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = getpid() ptrace$getregs(0xe, r2, 0x6, &(0x7f0000000380)=""/45) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x100, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000180)="5f0b14e89bc1f8ca588a7d41db013724d951588bae354eb3b21499bb7081ed6320a0ddac24e8ffe5dc6958376318eaa2e3afc4bb0cf1731a0344b50222accc24a017ba35bd1ba0ee420fb69c349532dfb7370a9af85e37edbdc8246118b23259e8d4764e896b57c52125d10b323cd244105f14440dc4db9f69537bf1fa82d4aac2df1f6a4714b71f067cb0b5849a80a0a5b0d2aa93f3a8538992dcb63971ff8ab1134951751e39ad7604ec422e1a41b04912fb9241f913bf421f0db1674cae6de1c43b2cdbc32adb269789a2882cf277bdaf737847d713b921b71915d8c47890fac78563e0c9ebca39818c864689c14bd2a09e53a3a8", &(0x7f0000000280)="9bc965b9edf14ec68654564f9504a13bdba0a48862789bc147aa0fd5991cdeb32ea72c5c2e87125c4a7282be0ca3235eda328db680bae35577d0c497736ba46d06c298d29a7325c2a33a8931d7e7d0fc58a5cf533eaa8a3e3b8d310cf2269124ede9381bb378f8a1ac78c8dc0c8d682dec9ce80b1fe2fd17c470fd2b8ed166a8f68e9715bb1aa52d2240", 0x2}, 0x20) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x14, &(0x7f0000000100)={@rand_addr, @dev={0xac, 0x14, 0x14}}, 0x10) 03:33:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000440)="575e3eef3db62f994be589caa03f871b80d69d906e8fb20743e480318a71ea03e2e8626cddbc3bf8c686ce3871f229a7dba5aa7ca2cc09e4aede9746c2453fcca21e311cca40b83a63701b5b0a1403", 0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x10000, 0x0) fallocate(r0, 0x0, 0x0, 0x400004b) 03:33:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) unlink(&(0x7f0000000040)='./file0\x00') 03:33:57 executing program 7: syslog(0x3, &(0x7f0000000000)=""/223, 0x3b725b843efbf21d) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000240), &(0x7f0000000280)=0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="560000003701000273090000000000007f00000000000000", @ANYRES32=r1, @ANYBLOB='8\x00-ppp1:,,bdev},)!keyringwlan0pssem0%cgroup)\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x56) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r2, r2, 0x80000) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000140)) 03:33:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x20000}) 03:33:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000200)=0x8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0xd, 0x2000000000e, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) 03:33:57 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0x83, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x22, 0x1, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 03:33:57 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000100)=@in={0x2, 0x0, @multicast2=0xe0000002}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa000008004500001c0000000000019078ac14ffaaffffffff0002000000089078"], 0x0) 03:33:57 executing program 3: nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f00000002c0)) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000000004, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x2) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:33:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) flistxattr(r0, &(0x7f0000000000), 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000000)="48855734522c1dbd6659b477ab3c0d45fc7e38b30b5ca9891cf8ee9bb5e1e7efd9c0c84f7e0d41060b273f690d4adaf027e8e12247f7d438d6521c951f8b3b199f25162686ed643345d4652350bcb3135a34efb96c012d44252669c4b0aedc84d8dbcfe6c2624a3b85d5f4fe78242e87e1a398b1c55b21363fd29c093a20ab094cac89ae99670756035de54226e8673cd9aaef10c98633d871689a3f0fac30cd4ff3a138403a0f41a088f1ffa8dceb8002dea3dbc1de8c161f843c320a15bd1c38eaba8e3c3d56cd24d4526e1ff3b36adc1db5b22343") 03:33:58 executing program 7: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500006d43daac989981d6f12d9f94eb7e6743c92b8d653555b5ba0ce5feaf00000000000000000000000000000000", 0xfffffffffffffecc) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x3f000000}) 03:33:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000039, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:33:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040), 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x1}) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, 0x1, 0xc71, 0x1, 0x400, 0x1, 0x0, r2}) 03:33:58 executing program 1: r0 = getgid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = semget$private(0x0, 0x1, 0x208) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000000c0)={{0x1, r1, r2, r1, r0, 0x100, 0x7}, 0x2, 0x5, 0x3}) socketpair(0x9, 0x0, 0x3fffffff8000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, @in6={0xa, 0x4e20, 0x222611d1, @dev={0xfe, 0x80, [], 0x21}, 0x1}, @in6={0xa, 0x4e21, 0xb02f, @empty, 0x7}, @in6={0xa, 0x4e20, 0xc16, @dev={0xfe, 0x80, [], 0x19}, 0x1000}], 0x64) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000200)=0x0) ptrace$cont(0x7, r6, 0x0, 0x7) syz_mount_image$iso9660(&(0x7f0000000240)='iso9660\x00', &(0x7f0000000280)='./file0\x00', 0x1ef, 0x5, &(0x7f0000001580)=[{&(0x7f00000002c0)="864d708236bc484f2365f64fc43a33b37e5717d6a5778413ef447d9fe42895c47c2b118cc23f6e817a993326fe27ceaf69bf436d51a49fbbf8b8b04c27b77b9841a622af937e861f7ecdee39304f1b82c8202c5ecc9dfa47d728169c10584000c497f9938fc29bfdb69d13ce032e5f2e80c0b21ecbb073b4853ea83c73eb91e61658a2347463e6c6a98a04f8f348bcdd9110ed41", 0x94}, {&(0x7f0000000380)="b1eb974a61c4c78057f1024ca8927b684b070023f97771fd94b3346e694fe15168fd9812c93051ec6ab356", 0x2b, 0x8f64}, {&(0x7f00000003c0)="f0c7d7b8cc4e9801e47143559cdd4ad49cc7b56aa43e9c151fb75fbfcf4cf0b2585ab40b6081e8e2942ee931393790f8a06c3c50c14464eb39b7452d3579df173be9337f1f474554324c8430e204df39f7472423541e6128dcfb7d80e357f56e764730248a40506157b99580d1fa961e2147f3ae959a786767ca7c27a5e4c0b316a149b2b6b9d228bdce901a9f5f34147c6c91ff9898f37689c7bfde74e65dbc716265a41db27f799cbd2f23492192ea42d5932fae59e3a29e1a8a394fa531280968cdad77db1de565f1b3007dd32121dc7c2b75016762dd3141d68301006f788b5e45a119f2f94f616341004249", 0xee, 0x80000000}, {&(0x7f00000004c0)="a9fcf5694df0990b8ad02145287fdb1dc6eb9f33ac88af2c86bbc23ecf392e570363925c30089f1b1751447726123d8e219f5f9f104da18f06fd64c61b1bdd764d99460ee7381e37e235d19592872407580838c37d5118f73de67c42e6ff7b93fafafa861da3a635438a273bf597887b2a71fec6dfbd9d33844b0b8c5cddd9fd8fe6", 0x82, 0x7}, {&(0x7f0000000580)="8b790ed820167d1fbd1a20b4858de4ac90553a6412cce97202214c22c4e0dfda92e792d48367a4101c0666ce455ec39d7c22399c74f1675d2101f435f1552171f041530119018052f89e9a57cad7600721c969b08a7c41f5623c6332dfec30ccefa3e9fda889419f62a9b4595872945a416f3d2358d931db8df705fe770f0470a829f3336ae41394f55d8233118a63859d70e77ae85cf33f048c952938a47bf8e9634cd22b116cbe4ed2c7bd0e1ba0ea7cdc18c5cf17148937b41bc7eb184ec4887e6f625bce504bdf9c7a9777e5d131001287be0046dd90616ccb14a4070e9ee52dae53fab24e1495df6b3edcba80f10adf51dda69ad5249149285e85af098de5dda5bf97bd5fc1df2414e5f728200c5e2be64b28e25be10af6d266e1bb06c4c4cc3e6de331132ec7346dd153a7e4bf13892fb7f7d7860538f801e34e28b6b80bf2696ac1fe32b8be78bb8ab6c250b88f118946b0af9bf9ba5f69177e70bb20ba386bb2634136141e1f0af44d7f4c64e16c107bfc41213416eb717338cd59f116b3d2a2c8758bb0552ab53422c031975aeafe8662183df63694770d6c612f95ada6d9b4285f381024697e4929b5789c19c6df78472d78ce9b80149e410f1c0f62083a5d67e8090ed898185dc82d624937fb3634a93e50f948d406c88710f05b022257af3ddb63a47b00a0779d53349559a86c7e8d280a5177273c9c467bd598424f5778f0e329f7c4f0e939ac263e108a49a3c0db7433ac5a2632fc1e166002422fc178d34ce9b3ea43b94fb7fab244ab400e246d5fc40e28c2ba8b74fadc27493bc5244e8053b07637bee1a1eb5c3a04177fc6489afbc29eba3eaa733228dc329ee9aa5d2dce5914db14efa4621c4b76f59c7d7e4cb438366b42cfd42c59df4c734093e3a0523e3b7cb9b6d2fb6ad5135050469430d3adb2495fa68a443122d9aeec1787e36b3594d0eb42e4cc68515f1757633169549a4c889c5d365a82674002c3880189ccda7850da6d11d6695e7fa02c933798c39706dd978f6ccd9d0b722b2ea018bcd24656cb071752eb968ecce99c3f0c301b6730112ad81b194b1df9a67b978ff9e759243fe54ab8e66552745b14268f046c60abe0b8d451faebc78ef9acff8f2cc01349d5bda9e2ef476014c9edc2beb0dc4a20b5585e57c6999872599409d7bb735aee93009645f5ebe7079b186bbf23a5e5fa9e954391ab794217a9d71683a75cdbe6b29f35d3933f860818ea128cb80ed94fe641f6aaab26e118b4637fae927a7b6ca33c9677b8eb6d697b2a386b69a58a363c6008df88b476c87dba1245c7e891266dd31668dbfcc13362f49cc623dd2595fee769b29fed2389cbcabba4677d73ba577ce9dd82bf63d3507ec0ca23bde2c6e9c4123a6ac780125143f408c24918c1bb12ba4f9e64f7f670b191b855b308daced8747982814434a59dc59e45413fd0ae5b538e94b665e4d81ec2c407c882d939dd2759d5f6c85bafb97b0f981345f9c43d8001b34323c2c52e553ddf2609e74f9d45bad34a49836b792a9e2255584bc12df5b28b5bf240ded72131e20dea822a3047121b8d2e365f13084fe81a69d5e4d8416ad0bc038bbb6ab38bb754b60119afbd4b339581b5ca90bd5f766cf91c0936f9f05defd12226d8d0de73a0a33d272fb09054e034a82ea079b8bf1a1cc2f51e02f43cc3b88d474302ac408a864c6418474990b72e601d0d52c9957cf100a9ed8bcccfeb63192648490758a0b3defd27501536610cd713e461611c62f85f80a0960ea43fdbd06398d724dc6ffb6221619dfe81c03da5e2883974248b47d9c610bd41e2d3e05b8c09ce2ef3e08ec86d0c91ae10fbf668a861204c91e140d3b3a6eefdc33375688742f014d23019229053aa4d9ebfb54ef166461210267dd5ef67ef315161173220aa865bb989866a7599490efda95498bb75661b193b322a6874e82e786d01894a85a20dbb48c64a8db8293c56974bfd38baf9df4cca9e8cbfc391ad9394aa4ba28c4f6e3cc18caf74688dbf8af5622bb630b08b52cd8e373ebe75a57c3be8d0c19a609c5da415bb5738b0ae6d7edb62655ec7aa081c7039ec9aebda8916c0464a2f990ad86fccd842a09837f3b003187ca5f7db82d40d571a939e0901a3cb88024b4fca07a79835c088801fc31b08598a75dd9f0c6e95683637ca78fa43f4a09a7e4f5c52492146c130c35d2e065dab2647ad36ac669ae54456ea136d74cf46e6682c440973a72a97c6e158c54346c7ab7c4ab35debf1d5354aa348b196b52600821e9cc619004bad63e171b29696bccfe549cb9cf95a34c5c927ddc4638d2db67e3a6ee49c146b078fcebd2440c9b042c6943b2100418a870ebadd7f795a102b8ef8d90655b2ed29057e64f8dc1715c4cd2b71c3950c4ddc6a1a181b7c364003d86292983d4fb96785d09033aa7147e3cae948b7c779f99399a3816a710a97cd18e97effbf1e8ae8aae61e700bcc8ad7088e1076d28cd60e3b90f526c5d22af14c846a7c26113586cb24f2e9364cf9297b040ee523698e54c27cbce37ca84f9c8d221e2993bafa817d815b3029a311adec48e4d9434acb334dfc9249922083f46f4f06d66045970c956c2075794ce32b47c949a602d327cb2ed58698a114a95f83a12723584d1237d3492409ef3c97af39f743280ef2c75c6ba4c34593f222c59e143cab2ac2c741577738d8bacb368fd7cacb50256fc812f68d92f19aa950f232da676b3b23d2de315b589c35c84b7672a009ff832aa1551836cfc50f0f38c04a28e4fb49ff82e7257818c17015f2b669f47bcdca67b82d4fb448fe3434bccd86d8a5917e1107b2bdd5f918b56e4252c7f835499d4bdd4e795779b21a566e172776cbd10381013e9bfa1beb89f0895aa1d8d7380b5d4ff3fc71a02dd1060e94891862b2fadfc1c60570ea3abedf0dae64382a3b9acca6946c570a71f070ed4147f72154a51c8c6bcb84ef434caa9c29eb4ad2dae4b7602bab9f6ec440014e2f7a12d0f13f3893b04c4d98a1a1fa9f1f3d23ae95b9c1834a014b4367fd8fd716fe96498c4a54b3f71fc8d3caa23f186a73d4c0a34610061e2c6be4ada801b29ebc1bd43ff84f068ff34e52d6376155cd3de637525d11591d817a0def525bc8ce950f672200ced805368ae9665bccdf1e0a16c4de557ec54b0f023d7b4f9dcc71f0d8d817e2366f47fc0dd989c7e5768362c1faa6d30999156c9b557373c69ad04aa0fe8bfb8a75e3ccde4f56ca2f1b3c42993a60de515d6b58b4169822c9f362bd33711488c4c4d5c38da44a9f19e9d97dd2d0292cf3725a6a86db5b4455ac2697e337ea5925b4517a8ac8153e7b48f6d0576ef3e07b2ac8fcc1abb515779be9ae56c6f8ec193e2b4f9d89a4113a2aca3389f7f45acd8d562d08311549f1972c415c4d414fb34200cc5c7c6d0b0f3cc35fe36f8dd7158700f3b11165ea263487b97aab20e9de1d9c8b4de05ef98b2dfa6805c1d712201b356479e7f3eae1c1d86e650990a06f482c66a684fc2bea0a02c5d8377514c72a44aaf9cf7d587e917d3246c1efa01dc01cc348dbf846852da33cbc28fd87ab4965d48efe733218d8a95ec92d35caa5e7cb71c5388b3cbe3c0d7153a081b69de08d199ca45f6503f0666427948460613983e4717686ad14805d5638013c7b40f1148a0c8bd97f5ce66fb122634e3b34a53030639f90c987a7731fcd2cd43637732ea8f43de26cad926f6d9b297275e1bac6c217ac34a59fd23dc1858ed1553c0c3b9defcb5bab20ceb4e2963cf1d31c9492c61743eff4579ffb646c97e80df648af58d7ce6dddf95184bb813714a963815284e3f55e1087501fd28c548fd84909c83cf912216048bba70c39f6000fa6d06782fd1a88ed8a01fffc1dfac25223ba4a78aa0e828b030009980f6581c9c8be4a0d7dc472bd70e80552f3ea08ffa73bec87a8f584faf924e9bf10fb204d8e3b3cb4266436d587e6168f961c8a4623c369457eb48ae6058dd21cd875a0508ea216180302ff2b4521fa7c2906ea0226ad488621ecc5247a8671352f50e472eb87ee22639553bef5df4831acc93658d44a11cb86d712576457f2141d58275fab1a3f0cf84a081287e9d408a7fc07c3d34c137bd9afcefd99018f71339a17961a11d0c8413a6b7494f94c86b3bf68e54677fe18a2728845a07e36de9c57f10dc247c23920ed0ce826ef21db29741790d42c7d132f980bd6ac70ff76998441a917755965c59e235c8b12ee31042e51ce9dfcfd70b412647a85b7425c495e4975942487a7f4181991c8c660ec079c3c9750c8b2fc1ee3ae99f1f8a27ffd14d3e61c44c73a6806ee1027f38def80e80e4068c39fb69b1a4f189760547b9926bcfa8f50290fca7be074f10752ab534d8a687bd24c10e7815b7ebdc254413e18a607c34270906219334b511ec22d5d2dd790bb505c7c20d7c86c979f3e115ee193dc3f9fbbd6031113d19371c846b49f0ec53f3934dcb157b00b02ee4dfc9c2b5c68fc563084f15f5de37df657c7726f1657882f9cdd541ab9c75a04ab6fe901fa9d8a76a761b7333c0fed149d040b708d2881f0efb7770359b97a955cbd049ce9f84b9bee95c0633eaaa8e93284056bd97db5521248312149442a3ff5846df6016d622fc315b3a407bc19801baff4326c3fbd437d5e7562f512e24c82e1231c46a018a34d96f17df436e911ca2ed48ded1cf0e480c14c8a6737cbcfffc7e581f8b411d0469dd12408d919975d72755b78dfb5d9c8d41e4c07e375fb9f6210d5165227c5e0cad45a3ecc66c315482c46174e43b0ca1886e6132c703bddd2287e7a65cbf80483e157ad5052ae2fd42de828b79fa9e53a8b8ef8185e668da0bc55ef9d67555137deb183f52dfd6a7602862e821545dd5271b783d769ee2c871857e201df7651ff73a8d9afa7a33557382059cee79c412e39ca8aa066e028bb5d33cf3842c0fde8027f15e1a34f9e04b90c60bc455e16c8458e61d7ac385a651f1c01f48f861a53839c95de3e77c5a844d6db48e4604865873ce9a73b505fb806e53f2f87807d9e4b824a1b010428ac563aad1bcc96b77d2efc54a0a7e88763b215360492494a465f70e6f249ba0004f5364f95b10f40fab0369e8d905cf3a7d0bfd00d043c80bdec37decfaad5e7a7ff4c6c671bd9c1fead83f32fc40942125cff2c33920aea331f75f73b1ffd2a5dbb36bfe3286bafa09d316f44b1a72ac8faeae2b707c8b9afb56c03ea1fb111e1ee46bd6b70b36538b93a2f41b8823fa98fa98ef2c586d63f6ba402d5f52b1c8ab4efe79e513bf371d63b14714fe5b49439ccfc996ea373453f4c9b1e122f26dc5a6cf80f71769daf40b28b17cff04c3b3015755d1375e30727a271dfce0400cdd5357489232b636e6e3d64f0e2e9e6afaa3f7365be8cc10098c44bd7bbd8546a28930ec1207737f5a1a53cc5b15ec12c484033f8b6bb2b78e16da7fc89d96d8cce8c92ec56a4927b68a8b411313f3e6efaf7a4b1c57424f49eb7f3b80dac0be8d93dff8e51819af51fe24ac11c2db70bc345ed840b696fb37ca1b9dd408f3717a0491c1c1713cb36be86acc20a1fc510dfb3ebd0b46e0881c5a60b89db0e19a02473c99790d09dd7fbbd5078e5bf1321b60599e530507e3a93f7069604cdca6befa6f7d1a2909f5c267fd17310d3fe44082f54b39655bfd5c9838c671f7ebae27c62839b4253ddfed43765f9849fd0e2324a095f65c3ae7b60c4a8b9153a674fc25e988ba2f0c754beab7adacefb8b1824b73653ff742ad61747ec0c93", 0x1000, 0x90000000}], 0x8000, &(0x7f0000001600)={[{@dmode={'dmode', 0x3d, 0x6}, 0x2c}, {@nojoliet='nojoliet', 0x2c}, {@unhide='unhide', 0x2c}, {@sbsector={'sbsector', 0x3d, 0x1}, 0x2c}, {@check_relaxed='check=relaxed', 0x2c}]}) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000001680)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f00000016c0)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000001700)={{0x9, r1, r0, r1, r0, 0x20, 0x40}, 0x9, 0x80000001, 0xfca9}) semget$private(0x0, 0x1, 0x602) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001780)={0x0, 0x81, "ced3118d890eda8cfb4ecd66126e236cb5bef24f2bbd8727ca9f47e0276a1cda8adc8cc3bfd21dbaf1703b30b97bc7137d1e46f65d0638c83d0f4947b4cc5f198a64fc02936bd72285ab9581be29f0b57a13cafc67b58f05613b54e3f6f850505d11793033f9c1817006ea853f070c55888ff2e601122bb83cf248ac7beacc9d7c"}, &(0x7f0000001840)=0x89) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001880)={r7, 0xfffffffffffffffb}, &(0x7f00000018c0)=0x8) r8 = request_key(&(0x7f0000001900)='rxrpc\x00', &(0x7f0000001940)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001980)='iso9660\x00', 0xfffffffffffffffa) keyctl$revoke(0x3, r8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000019c0)={r7, 0xe0, "66537dee69dc6ea692c2b83bfe14d30e72707c601b075dd78da6dbda8cfe46c4c18bb530afaa8671224d79691775463bc80c57cdcb3a3454c176bfc4a553f8ddc2d45cb6aa35bb791db2ebe00e1004e90770aa1c4148f1b78e285f83d2506e07ad6b589ba92805d82a585ca7781f2ea5cccd77646759d65e81718738f29ea7c382467edfc410364b106c6698c7ec26c7bb0311c2a44c29ea6b2896f6aa5a01d3fe50bb500745beb737c3c3d5e6ca91058f5fbc26092f06c0d29df022f3edb1d657b2ca349243042e8e6f5cbfecde4ec7af859e93d8baac2b28dd6d68e0cfdc73"}, &(0x7f0000001ac0)=0xe8) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000001b00)=0x5) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000001b40)) request_key(&(0x7f0000001b80)='rxrpc\x00', &(0x7f0000001bc0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001c00)='dmode', r8) mount$fuseblk(&(0x7f0000001c40)='/dev/loop0\x00', &(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)='fuseblk\x00', 0x40, &(0x7f0000001d00)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@allow_other='allow_other', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@allow_other='allow_other', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@default_permissions='default_permissions', 0x2c}]}}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000001e00)={0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000001e40)=0x89) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/sequencer\x00', 0x100, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000001ec0)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) perf_event_open(&(0x7f0000001fc0)={0x2, 0x70, 0x0, 0x401, 0x27, 0x7, 0x0, 0x6, 0x4000, 0x1, 0x6, 0x6, 0x7f, 0x6dd, 0x5, 0x46884dd8, 0x1, 0x5, 0x5, 0x401, 0x31, 0x8, 0x10000, 0x0, 0x8, 0x6, 0x1, 0x3, 0x8001, 0x2, 0x100000001, 0x47e1, 0x101, 0x2390, 0x7, 0x7fff, 0x7, 0x7, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000001f80), 0x1}, 0x1002, 0xdd, 0x5, 0x7, 0x800, 0x8, 0x1}, r6, 0xe, r4, 0x8) ioprio_get$uid(0x3, r1) signalfd(r5, &(0x7f0000002040)={0xfffffffffffffff8}, 0x8) 03:33:58 executing program 4: r0 = socket$inet(0x2, 0x1, 0x200000000001) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r0, 0x100000000, 0xfffe, "8e5244edbedd98c9a42fc6f9ed3ec493f21bb98fd8b1051225e98dbfcd7c2332bac4252f38f15a5ecdf26810b8314775d90598387ddeeef89118d567a63c348c88f9f7902916d8e2a3db8b3c7533ac0b4ece9b057230737d39b22466f6041e8239d3382d12699052695006ce5078eeb85c95cd7d6aa1ea494f76cc"}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000900)=@broute={'broute\x00', 0x20, 0x2, 0x3c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f00000000c0), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_bridge\x00', 'gre0\x00', 'ip_vti0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x110, 0x110, 0x140, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}, @ipvs={'ipvs\x00', 0x28}]}}, @common=@STANDARD={'\x00', 0x8}}, {{{0x9, 0x0, 0x0, '\x00', 'bond_slave_0\x00', 'ip6tnl0\x00', 'ip6tnl0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x120, 0x1a0, 0x1f0, [@statistic={'statistic\x00', 0x18}, @rateest={'rateest\x00', 0x48, {{'veth0_to_bond\x00', 'vcan0\x00'}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}]}, @common=@log={'log\x00', 0x28, {{0x0, "f877d94ea3ea2cf7150a61e1a2084fbc63a3016210eb44cd39faaf3a1bc3"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x438) 03:33:58 executing program 5: r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x2, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xa) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/74) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="507112f019de8967100000000100"], &(0x7f0000000000)) 03:33:58 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000002c0)=""/4096) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0x2}}, 0x1c}, 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x48, 0x20, 0x80d, 0x0, 0x0, {0xa, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80}}, @FRA_DST={0x14, 0x1, @mcast1={0xff, 0x1, [], 0x1}}]}, 0x48}, 0x1}, 0x0) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x3f00}) 03:33:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xc080, 0x0) accept4$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 03:33:58 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x9}) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0xfffffdfd}) 03:33:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x2, 0x7}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback={0x0, 0x1}, @in=@loopback=0x7f000001, 0x4e22, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0x20, 0x8, r4, r5}, {0x0, 0x8e, 0x7, 0x5, 0x2800, 0x4, 0x0, 0x7}, {0x7, 0x7, 0x1, 0x8}, 0xfffffffffffff6aa, 0x6e6bc0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4, 0x33}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3503, 0x4, 0x3, 0x20, 0x7df, 0x800, 0x9}}, 0xe8) socket$inet6(0xa, 0x3, 0x7) 03:33:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000000)=0xffffffffffffffc3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendto(r2, &(0x7f0000000040)="bcaa197d32eac32b92fd21786ad75a2b9a81d61697dc9304cff909a5a818ed6a92e03ad9d2894bdc4ce2da6077b710828d1c90452ac3fc551711240c5f771bd3861ad6ff45adb557b7e14031578ac437484dd6fe23a2494941646e60fb001828dd332ad91c29aa160fea9312d698789899dd618dd69414646d26", 0x7a, 0xc840, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) sendmsg$alg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="2185bc13006aa5ccde6f8c7989b289bbbda09ae73592095a65b1cfe5d8d9b1d8be8c310b57947fddd07090103cfb3ba7979e1d0417defec0447ae208800e703cc9bb4a491b58c1b362d624c07f5ffc47cf20e20133e0fd7fc8bd4b98f81be50602cd00ae5268d06c521a59eadbf341501fde3676fdb193b3fc291930bfab9a410765f47cc2f17e", 0x87}], 0x1, &(0x7f0000000540)}, 0x80c0) recvfrom(r2, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 03:33:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10}, 0xfffffffffffffde9, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14b4b644c00109810200000000000000000a0000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', 'GPL\x00'}, &(0x7f00000002c0)='&mime_type\x00', 0xb, 0x3) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/206, 0xce) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000008c0)="ba2000ec0f01df66b9800000c00f326635008000000f300f01cfbaa10066ed66b95d0a000066b8c800000066ba000000000f3064f6a644d12e0f017b17d9f066b9e20800000f32", 0x47}], 0x1, 0x80000000000, &(0x7f00000003c0), 0x0) 03:33:59 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6}, 0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x9}) 03:33:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-serpent-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000140)={0x3, 0x9, 0x340000, 0xe525, 0x0, 0x3}) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000008000000000000"], 0x50) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0xd1}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000080)={{}, {0x80}}) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x3f00000000000000}) 03:33:59 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) readv(r0, &(0x7f0000002680)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) getsockopt(r0, 0x6, 0x9, &(0x7f00000000c0)=""/48, &(0x7f0000000180)=0x30) 03:33:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r2 = mmap$binder(&(0x7f000044a000/0x4000)=nil, 0x4000, 0x6, 0x2010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x48, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r2, 0x3}, @exit_looper={0x630d}, @acquire_done={0x40106309, r3, 0x2}, @exit_looper={0x630d}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x2}], 0x4d, 0x0, &(0x7f0000000100)="044dc631bec938c705e8904c016c3e86466f03de2774f91f8e11d0a3e2b2b01146a134354e2be1ae9740cfdd0c68fe80a65dcfb59847313a16cd55e056e8ba7bbda142246f037bb5d2b92a7ff6"}) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:33:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001c3, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x7, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r1, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2}, 0x10) recvmsg(r1, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000ef8fd0), 0x1, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) 03:33:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x1}}) getrlimit(0x410000000000, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0xfdfdffff00000000}) 03:33:59 executing program 1: r0 = socket(0x0, 0x80005, 0x200000000000fff) getsockopt(r0, 0x8000200000000114, 0x100000000101, &(0x7f0000000000), &(0x7f0000000100)=0xfffffffffffffe49) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000140)=0xb) 03:33:59 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x4) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001280), &(0x7f00000012c0)=0x4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/4096) socket$can_bcm(0x1d, 0x2, 0x2) seccomp(0x0, 0x1, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x5, 0x0, 0x10001, 0x2}, {0x3, 0x8, 0x3, 0xffffffff00000001}, {0x1, 0x1b, 0x8, 0x9}, {0x5, 0x1, 0x1, 0x6}, {0x0, 0x3, 0x5, 0x1}, {0x3, 0x7a6, 0x1, 0x7}]}) ptrace(0x4207, r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget(0x0, 0x0, 0x1a4) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000001300)=0xfff) waitid(0x0, r1, &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x800000000000000}) 03:33:59 executing program 4: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getpid() seccomp(0x0, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{}]}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) unshare(0x40000000) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'cpusettrustedposix_acl_accesseth1-vboxnet1self\x00'}) write$P9_RREAD(r1, &(0x7f0000000300)={0x87, 0x75, 0x2, {0x7c, "8ec52bf59c9d6c0960ac7a605deba69ed1bb08b911a06807bc54273f6d2e97d41424c7be02131b8c55cdff81a0e8e7f2c02a7bd8efe5a9b8e60a6f8c538f5ce4f846192ce89459250fe9ac9e1f92dbc6599b2f46e74474c3101b35b81a4ccf3dd8127063bdee7b39908db9fbbc04aa205f6e536960c46617d39ac815"}}, 0x87) 03:33:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) [ 319.359923] IPVS: ftp: loaded support on port[0] = 21 [ 319.439014] IPVS: ftp: loaded support on port[0] = 21 03:34:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0xfdfdffff}) 03:34:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000001c0)=""/191) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3021, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x80000000) 03:34:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040), 0x4) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) 03:34:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000240)=[{0x1f, 0x1, 0x67, 0x1, @tick=0x8, {0x58fd, 0x4}, {0xff, 0x100}, @result={0xcaa1}}, {0x2, 0x24000000, 0xffffffff80000000, 0x8, @tick=0xffffffffffffffe0, {0x8}, {0x2, 0x5cac5fb1}, @control={0x5, 0x1, 0x2}}, {0x7, 0x7f0, 0xfffffffffffffffb, 0x0, @time={r3, r4+30000000}, {0x7}, {0x6, 0xfffffffffffffff8}, @queue={0x6, {0x80, 0x2000000000000000}}}], 0xfffffffffffffce0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="89"], 0x1) read(r1, &(0x7f0000000180)=""/126, 0xfe63) 03:34:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000ce, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x40, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000480)=0x0) write$cgroup_pid(r0, &(0x7f0000000500)=r1, 0x12) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xb}, 0x14) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000dc0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000ec0)=0xe8) connect$can_bcm(r0, &(0x7f0000000f00)={0x1d, r4}, 0x10) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x1, 0x47c5cc93, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000002c0)) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x2, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x40200, 0x2) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000540)) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000400)={r2, 0x3, 0x5, r7}) 03:34:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x4000}) 03:34:00 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000040)='/\x00', &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='9p\x00', 0x7048, &(0x7f0000000000)=ANY=[]) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='resgid'}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x50602, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x1ff) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x3, 0x2}, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x30, &(0x7f0000000540)={[{@resgid={'resgid', 0x3d}, 0x2c}]}) 03:34:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0x9, 0x2}, 0x269) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xc0240, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x2, 0x3, 0x7}}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002540)={r0, &(0x7f0000000340)='U', &(0x7f0000002440)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r0, &(0x7f0000000640)='\a', &(0x7f0000000700)}, 0x20) ioctl$FICLONE(r0, 0x40049409, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='+', &(0x7f00000002c0)}, 0x20) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x0, 0x0, 0x9, 0x2, '\x00', 0x8}, 0x1, 0x20, 0x1, r2, 0x3, 0x7f, 'syz0\x00', &(0x7f0000000200)=['ppp0security\x00', 'cgroupð1,vmnet0cgroupppp1lo&\x00', '/dev/vga_arbiter\x00'], 0x3e, [], [0x100000000, 0x80000001, 0x81, 0x1]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000100), &(0x7f0000000840)=""/4096}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001440)}, 0x20) 03:34:00 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1e2) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)) fcntl$getflags(r0, 0x40b) 03:34:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_trie\x00') getdents64(r0, &(0x7f00000001c0)=""/110, 0x6e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) fstatfs(r1, &(0x7f0000000140)) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x4}}], 0x212, 0x10020, &(0x7f0000004900)={0x0, 0x1c9c380}) ioctl$TCSBRK(r1, 0x5409, 0x6) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) [ 320.364510] EXT4-fs error (device sda1): ext4_has_uninit_itable:3149: comm syz-executor1: Inode table for bg 0 marked as needing zeroing [ 320.407097] EXT4-fs (sda1): re-mounted. Opts: resgid=0x0000000000000000,,errors=continue 03:34:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000832ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000dc5f98)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004) 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x2}) 03:34:01 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), 0x14) close(r4) dup3(r2, r3, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), 0x8) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r7, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0x30) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) dup2(r5, r6) 03:34:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6006f52600303afffe8000000000000000000000000000ffff020000000000000fd20000000000018700907800000000600a07ec00000000fe8000000000000000030000000000ff00000000000000000000000000000000"], &(0x7f0000000300)={0x0, 0x2, [0x0, 0x0, 0x45c]}) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x0, 0x100000001, 0x20, 0x101, 0x4, 0x2000000000000000, 0x3}, &(0x7f0000000100)={0x10001, 0x95a, 0x3, 0xffffff0000000000, 0x9, 0xadaaa0000000000, 0x81}, &(0x7f0000000140)={0x0, 0x8, 0x3, 0x3f, 0x6, 0x2, 0x6, 0x75}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 03:34:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x9, 0x129000) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000540)) mlockall(0x1) mmap(&(0x7f0000448000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x14800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) socketpair(0x10, 0xa, 0xd2, &(0x7f00000004c0)) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000080)=""/128}, {&(0x7f0000000100)=""/245}, {&(0x7f0000000200)=""/198}, {&(0x7f0000000300)=""/190}, {&(0x7f00000003c0)=""/44}], 0x129) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000480)) 03:34:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xbb}, 0x1c, r1}) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0xeb24386481a328c0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000002c0)={0x2, 'bridge_slave_1\x00', 0x4}, 0x18) r4 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast1=0xe0000001, 0x4e22, 0x5, 0x4e20, 0x4f3, 0x2, 0x0, 0x20, 0x3e, r1, r2}, {0x1000, 0x10000, 0x7ff, 0x6, 0xfd, 0x9, 0x3d7, 0x4}, {0x6, 0x6, 0x400, 0x8}, 0x38000000000000, 0x6e6bb6, 0x0, 0x0, 0x2, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d2, 0x2b}, 0x2, @in=@multicast2=0xe0000002, 0x3505, 0x3, 0x3, 0x101, 0x6, 0x4, 0x9}}, 0xe8) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003a001702000076c978050000000000000000c2"], 0x14}, 0x1}, 0x0) recvmmsg(r4, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/122, 0x12c}], 0x1) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0xd5, "5ead2e64f95821c7533bdb0a523c47c3685d54853bc4abc2423e65266ca6137d5e123147a1bf219f96a76e7309ca69504f8862a3703d8274453e1fe65bb59a9d360ab3d792191e6429409cc6032b988fb98c5edda3641ddcc70355a1f3cc5c99ae8e398d43941870e066a69db65ec912064a80ea70e9a3cace1954ce917d8f35f33865034bba27e58226043c2c1e78212bce7e022160e4a7995c0e8c0815bc2709df76d16e0c4f451ce5f45f75a89e639e99bfb7aa23ff614186958ba5ddf4c6ed3e6bab8f144795d85bfcb42625dac1b55c404603"}) 03:34:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000015b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="d6b3442eb61be5fd25f08aa6ddd66eed123d66c046c74eec2f6fa7110b4eee89de185865d74ff0e517fd2184d7c611089358011e06f89b1aacd94aff5ca67d6cf4bfe5b114d2b58b6314a02676af14ed09c29150f0210bbed4b9211fa8e95b067e75651ca92b348325b7daaaabff55ac3053a22a78145313c3e1d1163f13063037b1aff25be4c6c56164a633746fdd163988a94f49f06bb9bdfa16e2f8788685413cf9afa5239b45204e8890fc79c807526125e86fbcf91bfbdeffa81220e6e1595e865351d31135e0d4bd8c04482d23906a826b22bfaa9dec6c3353384f7c37a79e1a0e", 0xe4, 0xfffffffffffffffd) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="726d643136302d67656e6572696328383df2f35a6d00", 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r1, r2}, &(0x7f00000001c0)=""/190, 0xbe, &(0x7f0000000380)={&(0x7f0000000280)={'speck128-generic\x00'}, &(0x7f00000002c0)}) r3 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={r4, 0x2, 0x8, [0x4, 0x2, 0x6, 0xffffffff, 0x5, 0x69, 0x9, 0x7]}, 0x18) 03:34:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)) 03:34:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x80, 0x0) bind$llc(r3, &(0x7f00000002c0)={0x1a, 0x30c, 0x1800000000000000, 0x4, 0x9, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) 03:34:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, {0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffffff80}, 0x7, [0xa1, 0xb7c, 0x42, 0x7, 0x2, 0x0, 0x67d1, 0x20]}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x8}) 03:34:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000062) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x2) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) r3 = gettid() r4 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0xffffffffffffe3d8, 0x80000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@int=0x6, 0x4) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000000)={r2, r0}) r5 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x2) bind$vsock_stream(r5, &(0x7f0000000240)={0x28, 0x0, 0xf7da5676be15bd85, @hyper}, 0x10) r6 = syz_open_pts(r0, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000280)={0x7, 0x7f, 0x1}, 0x7) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TCXONC(r6, 0x540a, 0x0) 03:34:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0052d07dedde695b0654d8b5fbf8405977f32d0d000900000000000002b697b61233b8af27000000"], 0x1}, 0x1}, 0x200000000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x3f, 0x1, 0xff, 0x2, 0x1, 0x6, 0x9}, &(0x7f00000000c0)=0x20) recvfrom$inet6(r0, &(0x7f0000000100)=""/14, 0x2ef, 0x120, 0x0, 0x23d) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000200)="33219f71aac512598470bc183645a7fdaaf01b4e1988f5e39e6433aeed3120f303f872fdefbc71bd3a88203fb4ce5900d9d61b884f253001e5d0cbc4648b11c0b2cc09b474eacd21418574cf0d8d96cf8d805ec0425e89323303d052b1e2", 0x5e}, {&(0x7f0000000300)="512480db7630daaf6f165a0be55d79c14eca0a83ddee75ca71db3438b7ed2f845a0eff1eeb77a9cd87304828e5ccfcb10ee99f5860f2d281354d24c126f61a2b923ef4ff88e62100b38cd3fe22dd35ab6455ddacfff67c32781cda544a8be059ba3065f96b644e62cb912a7a0c0a71be095685483fa87d47cf", 0x79}, {&(0x7f0000000380)="600adfa96f21e60ee87e0cd5fe666b3ca844046ab3ee6eb44c90ade39ed8773632296e29a6650ea3c1843ddbb12238db99ee827f9601973e7b39ad1ab44d51", 0x3f}, {&(0x7f00000003c0)="c6c47e35403f088b2f7f2e929afc2e46b437b10b63ed9b3ccc09103f4fb7175632ec335c4c94fe010b75296d2e0349ecf0330a14e213b1b14ed0f9592957419cd8ed04673e9acfa4dc2753e8a7dba234f04ba2ba2474", 0x56}, {&(0x7f0000000440)="1cfcc565554c0b20f924c8245062119f5b39eb29f196b5f6ee132e7587735722a94163b8ebd8c94f45db5020c2784ef4feae78f90a754413504fc4e83df6bea8ab7b8133415bf97b5215cf924a664558fbc4c41dd328cc031270f6213763e3fc5d70a12a3ac9925351db6de129bfca1897d44c0e4e91a986d2b25016115550ced9f7e4670da9600b1fe03b53ae5f4ef9557fb138af576314e51d2f02e99826cc34dcb63095d9dd87b6285012708794a7935b10a9e030fd9aceee45a62389276df2baddcf64f2f1aa4ec4b5e23c3b3809008486d3dbe4ab7bcc02c029e0a9effb40", 0xe1}, {&(0x7f0000000540)="36b037393f0da9913e3581845b77612a7dcae56f78e180eaaf5759e9e92dd20bf14dda8a8f65113fa6b29672149e8dba00ee768cbfef5224a2fb6beb60c48c3bd1fabc5b1a8200d4e0419028cb0d7763a53d60a8d6dddbaadda02038915387e0abfcdbc7f6f654c8150cbdd135d8852bf04a9c66dfd9ccd61e5c54e92347708f36f9086183f142f4512f3681cf74073e295a82f277", 0x95}], 0x6, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:34:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x4000000000000000}) 03:34:01 executing program 3: r0 = socket(0x100010, 0x80002, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) [ 321.407815] could not allocate digest TFM handle speck128-generic [ 321.453980] could not allocate digest TFM handle speck128-generic 03:34:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30000000010, &(0x7f0000000140)="02000100020001b400000002072065480100000000000000", 0x18) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4885deb8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8c2, 0x0, 0x79f7649d, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) 03:34:02 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x357}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x20000000040002}, 0xfffffffffffffcd0) r2 = socket(0xa, 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001840)={r1, 0x80}, 0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000001800)=&(0x7f00000017c0)) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$inet6(0xa, 0x200000000008, 0x3fd) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000280)=[{&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/104, 0x68}], 0x3, 0x0) r7 = getpgid(0xffffffffffffffff) getpriority(0x3, r7) ioctl(r5, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001680)) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r9) connect$nfc_llcp(r2, &(0x7f0000001740)={0x27, 0x1, 0x0, 0x5, 0x88, 0x31, "2e6d279d062006508e73cfe8b490aae2c05b6d1d39abcb7833db9566ef78755ed8c34f5907709c3f205c343bc3ba21adce04b65e64e77d3e772cac471adc3b", 0x10000000039}, 0x6) r10 = socket(0x10, 0x2, 0x0) signalfd4(r0, &(0x7f0000001640)={0x1f}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000016c0)={0xfffffffffffffff7, 0x100, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x3, r1}, &(0x7f0000001700)=0x20) ptrace$pokeuser(0x6, r6, 0x34d1, 0x3) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='sysfs\x00', 0x110001, &(0x7f0000001940)="42e935580ee227017544ba337c5ccde77603aa4714d23c896d385b44f983581a50d2cca00e331b8f6a76dd56039045a8596fb4e5b4e8b26f69822e5b4961c114e5d40b598932e7c02be8e3868c9c42ad6ef432a819b8ec41d27f") setgroups(0x0, &(0x7f0000000000)) setresuid(r8, r11, r11) shmget$private(0x0, 0x4000, 0x1000000001003, &(0x7f0000ffc000/0x4000)=nil) setgid(r9) 03:34:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) setsockopt(r0, 0x7d736eaf, 0x0, &(0x7f0000000100)="e49a5f9d885a36b1a033ad31bb3b833ec71dbf2456d91f0dd6e2518f8de07789105c7c6ba0906142547c80ff0937536a5f4801a466cb6cc9f2aa2cca3fc2b839722954e2f64b0266f13316e4f09b6ec8269002b2657cc1ad60293a36d09887a84c7552b5c035141c941c567897d48fe5a7d5a21dc1b62905c6555ef9", 0x7c) 03:34:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000c00)='net/softnet_stat\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000c40)={'icmp6\x00'}, &(0x7f0000000c80)=0x1e) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="96797374656d2e2c23000e0d800edf3c0a4b62afb343d04a7862fa29398bd2f736ef2e6f134fa08aad58c00fcb0b5a1d7a041f38c74429d491b1633d5a37f03736b6f924e00806c2298831a6016781b681f01e9906a73788bac94f0a27fde5b58f6e9d3072089c7c4e5a63477f60624efeb4ede524a3879f93d94a6d0b3633391bfe54c9aff311ff35923aa53d721f3ad6bb264d8b050c9dde7a43942289"], &(0x7f00000000c0)='icmp6\x00', 0x6, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="f800000016001703000000000000000000000000000000000000000000000001e000000200000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000000000aa0000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"], 0xf8}, 0x1}, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x7f00000000000000}) 03:34:02 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x30d100, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x8, @loopback={0x0, 0x1}, 0x100000000}}, 0x5000000000000, 0x0, 0xd8b9000000000, 0x3, 0x82}, &(0x7f00000002c0)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000540)={r1, 0x2c, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0xffff, @empty, 0xfff}, @in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000580)=0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) fcntl$lock(r2, 0x7, &(0x7f0000000640)={0x3, 0x3, 0xfff, 0x9, r4}) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000200)=0xfff, 0xfffffffffffffff9) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000006c0)=""/197, &(0x7f0000000140)=0xc5) fcntl$lock(r2, 0x5, &(0x7f0000000300)={0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000680)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xff, 0x3, 0x3, 0x4, 0x200, 0x4, 0x2}, 0x20) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000340)) r5 = accept4$vsock_stream(r3, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host=0x2}, 0x10, 0x800) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) pause() 03:34:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000448000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0xc986892, {{0x2, 0x4e24, @multicast1=0xe0000001}}}, 0x88) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:02 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000157, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)="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", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x1) r2 = getpid() process_vm_readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/27, 0x1b}, {&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/134, 0x86}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x7, &(0x7f0000000080)=[{&(0x7f0000001600)=""/175, 0xaf}, {&(0x7f00000016c0)=""/105, 0x69}], 0x2, 0x0) 03:34:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) r1 = dup(r0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0xfffffffffffffff8, 0x3, 0x7fffffff, 0x8}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7fff, 0x0) ioctl$RTC_WIE_ON(r2, 0x700f) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x20000}) 03:34:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) r3 = eventfd(0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ff, 0x101000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r5, 0x1, 0xfffffffffffffff8, 0x1, 0x9}, &(0x7f0000000140)=0x14) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3}) 03:34:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000fffb01020000000000423cef78ce3f00"], 0x14}, 0x1}, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'btrfs.', '\x00'}) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:02 executing program 1: r0 = socket(0xa, 0x7fffffffe, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4, 0x2}]}]}, 0x28}, 0x1}, 0x0) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x8000000}) 03:34:02 executing program 7: r0 = getpid() r1 = gettid() r2 = eventfd(0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x400, 0x4000) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f00000003c0)={r3, r4, 0x1}) r5 = socket(0x1e, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="12fe0a64b4bcb71cc6966e9e24794dbc05507a5b67c14005eefc67b5e3f4e770c0cbf3b9d6cae4761ed9e7280b36501aef8569d61265e164344d7f636189ad14718f8d02a3130c90e80c65d89389d659f0cac11880a623e9f615a137ebf9a602f2e5ee28f43c891dc77a59c6a7802dc7d70dba467be7e7c5181e18a739e01a3f82e1766c2915d7a84152fb4c446fcbe97bc3b8a002ebaa8f54bf55e38fdbf3e7f2d66ed7f83d799daaa259ee3195526e0ef4c87425b7d248dccfb1", 0xbb}], 0x1, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xffff}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x58a}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3}], 0x78, 0x80}, 0x810) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_SET_TSS_ADDR(r7, 0xae47, 0xd000) r8 = dup3(r6, r5, 0x0) getsockopt$SO_COOKIE(r8, 0x1, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x2, 0x100000001}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000300)={r9, 0x1, 0x3}, 0x8) 03:34:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='\'\x00', r1}, 0x10) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fanotify_init(0x40, 0x8000) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)) write$P9_ROPEN(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x71, 0x0, {{0x20, 0x3}}}, 0x18) 03:34:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140800003a0001020000007d000000000a00000012aa3ab4a545411a6f1f9f6228f9752f716a9ef2caa22ee4426c59afb2e83b761d9bbf8add7e895b2081717e04167eda5e8e4074f947706473029640ab10d794ca00000000000000"], 0x14}, 0x1}, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001f80)}}], 0x1, 0x0, &(0x7f0000004900)={0x77359400}) 03:34:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x40000000}) 03:34:02 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x81, @remote={0xfe, 0x80, [], 0xbb}, 0xf197}}, 0xffffffffffff0001, 0x1000, 0xb0, 0x7f, 0x1}, &(0x7f0000000240)=0x98) socket$xdp(0x2c, 0x3, 0x0) 03:34:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x164e, 0x4a, @dev={0xfe, 0x80, [], 0x20}, 0x1ff}, {0xa, 0x4e24, 0x5, @empty, 0x80000001}, 0x3, [0x800, 0x9, 0x5, 0x8, 0x3, 0x6, 0x3, 0x2]}, 0x5c) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1000, 0x8, 0x2, 0xaf16, 0x9}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0xfffffffffffffffe}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95)=0x2, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x301000, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000003000000000000000000050000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000"], 0x78) close(r2) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000001c0)) close(r1) 03:34:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x7f000000}) 03:34:03 executing program 5: r0 = epoll_create1(0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000080)) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r0}) 03:34:03 executing program 7: syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaad80c200000008004500001c0000000000019078ac1c14bbac1414aa00009078ffffffff"], &(0x7f00000000c0)) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x8e7, 0x2}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000140)=0x10, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0xffff, 0x3ff, 0xfba}, {0x0, 0x10000, 0x6, 0xab}, {0x3, 0x4, 0xffff, 0x1297e4c5}, {0x6, 0x7, 0x1, 0x4}, {0x1, 0x81}]}, 0x10) 03:34:03 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x102, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x1000}}, 0x18) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000100)=""/38, 0x10000, 0x1000, 0x100}, 0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000808000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}], 0x1c) 03:34:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00'}, 0x10) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x2e) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000600)={0x53, 0x0, 0x22, 0x0, @scatter={0x0, 0x0, &(0x7f0000000400)}, &(0x7f0000000440)="58ddf240988a10b1cd89a1bf69b0c3ab5327d39db8e71dfc2368593c9bac0fc0e0e8", &(0x7f0000000500)=""/191, 0x0, 0x0, 0x0, &(0x7f00000005c0)}) 03:34:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000006b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:03 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f000079d000)=0x100000000000001) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) 03:34:03 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x1000008000) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r3) r4 = accept4(r1, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) recvfrom(r2, &(0x7f0000000380)=""/207, 0xcf, 0x40010020, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000006180), 0x1b3, 0x0) 03:34:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x7f00}) [ 323.191070] sd 0:0:1:0: [sg0] tag#6742 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 323.199872] sd 0:0:1:0: [sg0] tag#6742 CDB: Repair track [ 323.205389] sd 0:0:1:0: [sg0] tag#6742 CDB[00]: 58 dd f2 40 98 8a 10 b1 cd 89 a1 bf 69 b0 c3 ab [ 323.214395] sd 0:0:1:0: [sg0] tag#6742 CDB[10]: 53 27 d3 9d b8 e7 1d fc 23 68 59 3c 9b ac 0f c0 [ 323.223277] sd 0:0:1:0: [sg0] tag#6742 CDB[20]: e0 e8 03:34:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02132d01020000008916400000000000"], 0x10}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="021200001100000026bd700700009887400000000000000000790000000800120003000000000000003800000006003200030800000900000000000000ac1414bb000000000000000000000000ac14142c0000000000000000000000000400040005000000f8450ef12b9d3ba2aa40dc6a1d6e43071f000000000700003f00000000000000039d4d56910b0005000000011e6c117588399623f5b370cb2e2eac7f5fb415964fc420c99e489a5d47cdc9df6d72"], 0x88}, 0x1}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x2a101) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000002c0)="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") 03:34:03 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r0, &(0x7f0000000040)=@hci={0x1f}, 0xfffffffffffffdde) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x80) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) [ 323.234126] sd 0:0:1:0: [sg0] tag#6741 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 323.242928] sd 0:0:1:0: [sg0] tag#6741 CDB: Repair track [ 323.248436] sd 0:0:1:0: [sg0] tag#6741 CDB[00]: 58 dd f2 40 98 8a 10 b1 cd 89 a1 bf 69 b0 c3 ab [ 323.257336] sd 0:0:1:0: [sg0] tag#6741 CDB[10]: 53 27 d3 9d b8 e7 1d fc 23 68 59 3c 9b ac 0f c0 [ 323.266234] sd 0:0:1:0: [sg0] tag#6741 CDB[20]: e0 e8 03:34:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpu.weight\x00', 0x2, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/132, 0x84) sendfile(r1, r1, &(0x7f0000000040), 0x100000001) 03:34:03 executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)=0x400, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendmsg$unix(r1, &(0x7f0000001380)={&(0x7f0000000040)=@abs={0x8dffffff}, 0x6e, &(0x7f0000001340), 0x37f}, 0x0) getpeername$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f00000001c0)={&(0x7f00000013c0)=@deltfilter={0x1870, 0x2d, 0x210, 0x70bd29, 0x25dfdbfd, {0x0, r2, {0xc, 0xa}, {0xe, 0x2}, {0x9, 0xfff3}}, [@filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x68c, 0x2, [@TCA_RSVP_ACT={0x10c, 0x6, @m_vlan={0x108, 0xb, {{0xc, 0x1, 'vlan\x00'}, {0xc, 0x2, [@TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x61c}]}, {0xe8, 0x6, "b2834ac7ecadc62e0a2e1aedb569c48b4f93d7aef77de650f7fa1d5e3150545c22e1cc4ba41d7ddf389479576c1b35edc75dace7e9496d07d545169bd0a0dca07ad8fd83941f0a92847aa4e231fe54b6e2c3beea1e12d1a505b87830dc690c6cbae7ad850cd193c03b574e0ad0864764240696ecf9701f2705c3a4841de190ea3e0ac758cbf6eaf7cd0c9f5bebea73fe7ef6bbc0f788cdb1942cd2ca6291c5757553191fbeb02360aa888bdc3cd82929c33c292d1da0f59c9b5f1e7d0702fab9239d44b41865aa108ba911fe5b786ff6578e48c7f7b86611e1eec5f332b23b2983c0"}}}}, @TCA_RSVP_DST={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @TCA_RSVP_ACT={0xfc, 0x6, @m_bpf={0xf8, 0x2, {{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x3}]}, {0xdc, 0x6, "7d350b91b936a92b095e91187691582246ecec71ab1ed5b34a0bf21362ff7cef40433682d1bf3c222322bc55cd200411ad24232586af4d9e7ce1fe0c8076acdd9eb5435c0eba0e59ed5763d66c02f3645a476536ab6246fff59f032f2eb9c149e8d95225b3636db48897c7a6a4f0e7cbe87b6ecf9bfa0e1e9022572155c3e10fec651db1282ada9da34ff17881a0cbab6ad0e7c00c595e297f6f519f4887cd82dfb7d9109130b518ee165b22208242e1059771bd2d34f45ab8c072cf70995ed7c8244b671a57b284e4be9bac21b77376faee5ff101496b1e"}}}}, @TCA_RSVP_SRC={0x8, 0x3, @local={0xac, 0x14, 0x14, 0xaa}}, @TCA_RSVP_POLICE={0x40, 0x5, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x6, 0x5a43602, 0x4, {0x17e, 0x0, 0x7f, 0xffffffff, 0x9c}, {0xffffffff80000001, 0x2, 0x5, 0x6, 0x3, 0x7fff}, 0xb8, 0x5, 0x1}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x1, 0x6}, {0x8001, 0x7, 0x1a9}, 0x6c, 0xa6, 0xac, 0x7}}, @TCA_RSVP_SRC={0x8, 0x3}, @TCA_RSVP_POLICE={0x408, 0x5, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x81d, 0x81, 0xfffffffffffffffd, 0x200, 0x5, 0xe1, 0xffffffff, 0x1f, 0x5, 0x2, 0x0, 0xfffffffffffff0a6, 0x8e9, 0x8, 0x40, 0x0, 0x715, 0x4, 0x0, 0x4, 0x1, 0x0, 0x80, 0x0, 0xf788, 0xff, 0x7ff, 0x2, 0x1773b029, 0x1, 0x1, 0x50943d43, 0x2, 0x1, 0xae9, 0x4437, 0x1, 0x8, 0x100000000, 0xfff, 0xfe5, 0x86a, 0x6, 0x2, 0x0, 0x10001, 0x1, 0x75, 0x8, 0x37, 0x5, 0x3f, 0xb53, 0x6d87, 0x3f, 0x3f, 0x0, 0x71fa, 0xe4c, 0x50ce4fc7, 0x283, 0x5, 0x7, 0x7, 0x40, 0x7f, 0x1ff, 0x7ff, 0x1, 0x100000000, 0x2, 0x8001, 0x8b0, 0x1, 0x5, 0xffff, 0x10000, 0x3, 0x0, 0x1, 0x8001, 0x6, 0x27ba, 0x57b, 0x7, 0x0, 0x8, 0x840, 0x7, 0x5, 0x9, 0x0, 0x8, 0x1f, 0xffffffffffffeff1, 0xff, 0x0, 0x0, 0x5, 0x0, 0x200, 0x80, 0x3, 0x1800000000000, 0x978, 0xfffffffffffffff9, 0x5, 0x100000001, 0xd0b, 0x84b, 0x8, 0x7, 0x8, 0x5, 0x3f, 0x8, 0x9, 0x2, 0xce, 0x2, 0x44, 0x9, 0xfffffffffffffffa, 0xe1, 0xfff, 0xfffffffffffffe67, 0x0, 0x8, 0x5, 0x6, 0x3ff, 0x2, 0x5, 0x1ff, 0x101, 0x897, 0xff, 0x7fffffff, 0x3, 0x2, 0x2, 0xfffffffffffffffa, 0x20, 0x8, 0x8, 0x10000, 0x2, 0xbb7, 0x7fffffff, 0x2, 0x101, 0x8, 0x83c5, 0x1, 0x100000001, 0x8001, 0x6, 0x3ff, 0x10000, 0xfffffffffffffc01, 0x3, 0xfffffffffffff000, 0x8001, 0x401, 0x8, 0x200, 0x3, 0xf8, 0x0, 0x2, 0x1, 0x7d72, 0xfa9, 0x81, 0xeb, 0x5, 0x101, 0x13, 0x7f, 0x6, 0x9, 0x9, 0x100, 0x20, 0xffff, 0x8, 0x5, 0xac0, 0x5, 0x3f, 0x2, 0x1000000000000, 0x7ff, 0xffffffff, 0x3, 0x9, 0x7, 0x2, 0x400, 0x1, 0x100000001, 0xf0, 0x0, 0xffffffffffffff78, 0x4, 0xf6, 0x10, 0x80, 0x1, 0x7, 0x7, 0x80000001, 0x4954, 0x3, 0xffffffffffff8001, 0x8000, 0x1, 0x198e, 0x3, 0x6, 0x8, 0x9, 0x5, 0xa6, 0xffffffffffffffe4, 0x1, 0x40, 0xc735, 0x8, 0x3, 0x3, 0x9, 0x422, 0x3, 0x7ff, 0x100, 0x8, 0x7, 0xc20, 0x7, 0x4, 0xffffffffffffff87, 0x7fff, 0xf01, 0x7aa, 0x200, 0x3, 0x2, 0x6, 0x5dc, 0x1, 0x2, 0x7fffffff, 0x80]}}]}}, @filter_kind_options=@f_rsvp={{0xc, 0x1, 'rsvp\x00'}, {0x100, 0x2, [@TCA_RSVP_POLICE={0xc, 0x5, @TCA_POLICE_AVRATE={0x8, 0x4, 0x65a4}}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast=0xffffffff}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast=0xffffffff}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x5, 0x200}, {0x0, 0x3, 0x6}, 0x29, 0x1f, 0xffff, 0x1ff}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x3ff}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x80, 0x0, 0x5}, {0x9, 0x4, 0x5f2}, 0x33, 0x400, 0x81, 0x100000001}}, @TCA_RSVP_ACT={0x80, 0x6, @m_connmark={0x7c, 0x19, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x26, 0x0, 0x5}, 0xcf84}}}, {0x44, 0x6, "87d9f14ba43838eb53cf80ebd0656b604ca8df023e48535d5ecbd767e03c33d1459d47e9908a06b750aac07a5c22716c6d7da9c97b24ac2c4697f9fca0"}}}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0x7}}, @TCA_RSVP_SRC={0x8, 0x3, @loopback=0x7f000001}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_rsvp6={{0xc, 0x1, 'rsvp6\x00'}, {0x1084, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0x10}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3f, 0x9, 0x8}, {0x7, 0x80, 0x7}, 0x36, 0x1, 0x0, 0x2}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback={0x0, 0x1}}, @TCA_RSVP_ACT={0x1044, 0x6, @m_nat={0x1040, 0x2, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x6, 0x8, 0x8, 0x242}, @loopback=0x7f000001, @rand_addr=0xfff, 0xffffff00}}}, {0x1004, 0x6, "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"}}}}]}}, @TCA_RATE={0x8, 0x5, {0xfffffffffffff801, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x1870}, 0x1, 0x0, 0x0, 0x91}, 0x4004000) 03:34:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000180)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) r1 = socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900000000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000070b0000000005000500000000000a00000000000000ff02000000000000000000000000000100000000000000005447f20a2f1795553c47b74fcd48a3b23bffdacb96d5d98ae82161124a2ecbdab3b8d0b247af9150286dbc1cc3e193bb6475a1bbc6d2a0f597cdfb00eea8245fea411b0b7cabc4c3df1ed496bbcb993790476da9450b17a1fb783657e82f76960480efca55ea480dcef6fdf9becd9cbf56533a11d31da470af33fa16e7a41a444393733ac68d9683708e3667040334d966004752be1be0cd530400000000000000a86d1d9f48"], 0x98}, 0x1}, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x44000, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000200)=0x10000) move_pages(r2, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0], 0x2) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 03:34:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x100000000000000}) 03:34:03 executing program 1: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x2dca}}, 0x3, 0x3ff}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, 0x84) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9) 03:34:03 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x68b) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[{0x14}], 0x10}}], 0x2, 0x0) 03:34:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='em0}uservboxnet1\x00', 0xffffffffffffff9c}, 0x10) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000001c0)={0x3, 0x9}) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100), 0x63b174929ce01af}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) sendmsg$alg(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001200)="ade47410b5b64595f621a7951e950fa289b5b10feed9affa91715c615cc5c169052be150f181238e720dfde635a6ae376c08a5ea3d6aa2bcf91a1638d4ac8281e8930b25bc489e8d8b666b3316d4297a204a4966950fb8e601ccb904376c8f6a92831385992ec993229335723644443573a1bc3437564bed3d5333afa2333eb7da7ffb277ac34e4c6b86398450f58ce623d310573b62ec48f6", 0x99}, {&(0x7f00000012c0)="c388c1ce60997ce60062a4a7ca00d8d7e673180e6522f3eb4f64ee6d73017a7b872abe9056e7c57d354264b60e43b6ff4b77d81506d5e21378977b27710063cd92b9cfd8b99757b21f356d5d1224b7988d043b9db88fac9d3ff9f797b56cfd2dce741ea260a270ec9547399a365f141cea68796626b486f824100aec73cee90e0490b74df77890a39416018e9f80e392e81f7a5ba91852422d3ff454d107bd61108cfba6b647863cb352e507c1ae6ba2bc9c907611efa4700c7059a7cc53780217ed2dbf36a023ea3343de77d4b9b77adf002a8688fc51e26425e91e15d0b4", 0xdf}, {&(0x7f00000013c0)="f98656e3e58e0bd7c5516f87e3e52065b9c6b544918e96c9fe4e0a791703665ff45371873f019f682bfe066df1e3ba605c4a2d1befb3a2daad4e0fcc74a2e75a9d68f8d9af5a6c3908", 0x49}, {&(0x7f0000001440)="f20e74e672652c6d21f02927d7282a294ecba6c72dc1425954c858df59b51367c64af72ce23e6bf81da52ac381d9070461a761df620e55a79db19b99f0a59b6b15b2f6a7277d871cef6e129d97a6e5f4c9969bd3b3666061be088d3041ac968912eca443db3a5826243ba380b4bf8fa478880e973667208d43c0fe2128ed36364fda03fb2d42804e228a20b79bcb24e4243d1231fce1ed2924f664b526c2b5ef9deefb0e20adfdcf48ec5133d80df3d809461518d6", 0xb5}], 0x4, &(0x7f0000001540)=[@iv={0xc8, 0x117, 0x2, 0xb3, "dea1d3e549779022cd9b14efa7bdc3ec8b794942670e69a1fa1ef5123b489ed89cb453119cdb95e082377c331ecd91d188683577e3e5083aabe8f2cdecb4c09e03393c0876e2315faa141d9ee19d6c7b6b8fa3905429f246412389a6a3e447a1ec51a19b767795d4042a18224e287d28d8af1bbba15c5e1e2abab5a30dcb91998b2a262581d1053a7e47537b1cbac9919deafede130e6c902d7dd2e60edd03b5ec48dffb5cf3377f96e74b8c7b6636a01c05c8"}], 0xc8}, 0x40000) 03:34:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x2000000000000}) 03:34:04 executing program 5: r0 = socket$inet6(0xa, 0x10000080003, 0x85) socketpair$inet6(0xa, 0x4, 0xe09b, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000140)=ANY=[]}}], 0x2, 0x8002) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x35, 0x2, @tid=r2}, &(0x7f0000000180)) 03:34:04 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='team0\x00', 0xffffffffffffff9c}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x24100, 0x0) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) restart_syscall() r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x100000001}, 0x1c) 03:34:04 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000448000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0xffffffffffffffff) fcntl$getown(r0, 0x9) getpgrp(0xffffffffffffffff) fcntl$getown(r0, 0x9) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x8000) r1 = getpgrp(0x0) sched_getscheduler(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000449000/0x1000)=nil, 0x1000}) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000180)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) r1 = socket$key(0xf, 0x3, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x98}, 0x1}, 0x0) r2 = fcntl$getown(r0, 0x9) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x44000, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000200)=0x10000) move_pages(r2, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0], 0x2) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 03:34:04 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0x80045301, &(0x7f0000000200)) 03:34:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f, @local={0xfe, 0x80, [], 0xaa}, 0x2}, {0xa, 0x4e23, 0x80, @mcast2={0xff, 0x2, [], 0x1}, 0x7fffffff}, 0x80000001, [0x1, 0x7, 0x7, 0x4, 0xffffffff, 0x80000000, 0x3, 0x2]}, 0x5c) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2400) close(r0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)=ANY=[]) 03:34:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0xffffffff00000000}) 03:34:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xfff, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x18, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 03:34:04 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0xca6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000141, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:04 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x2, 0xe8a6}) r1 = socket(0x14, 0x6, 0x5) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000100)=0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000dbf000), 0x3a8, 0x0, &(0x7f0000b2d000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = socket(0x15, 0x80005, 0x0) getsockopt(r2, 0x114, 0x2715, &(0x7f0000000080)=""/13, &(0x7f000033bffc)=0x10) 03:34:04 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000080)}}, &(0x7f0000000140)) socketpair(0x15, 0x80b, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000180)={0xfd, 0x0, [0x2, 0x4, 0x7, 0x9]}) 03:34:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) mmap(&(0x7f00006e4000/0x2000)=nil, 0x2000, 0x5, 0x40110, r1, 0x0) mincore(&(0x7f00001bf000/0x4000)=nil, 0x4000, &(0x7f0000000440)=""/33) 03:34:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x305302, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x637, 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae9c, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\t']) 03:34:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000005}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x210, 0x70bd29, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf"}], 0xaaaaaaaaaaaac60, 0x0, &(0x7f0000000100), 0x330) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_OPERSTATE={0x8, 0x4}]}, 0x28}, 0x1}, 0x0) r5 = getpgid(0x0) getpgrp(r5) 03:34:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x1000000}) 03:34:05 executing program 0: mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) fcntl$setflags(r0, 0x2, 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "46a8b58fd9388a66a95623c93463e1f43def6c488eb1bb382950cd221b21cf778816ca5444deb5e553d245ca82149117597809cf2e8286ce1890b5c42fcde5cefdaa4f81cd740222c0a52fab45cc7e34f28bd0249feff5a8497988ddd9356a6621d7c383e942b511069620"}, 0x6f) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') bind$bt_sco(r1, &(0x7f0000000140)={0x1f, {0x1, 0x1, 0x9, 0x80, 0x8, 0x8}}, 0x8) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x10000000000000ce) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x44}], 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 03:34:05 executing program 5: r0 = getpid() r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x400100) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000200)=0x2) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x4000000061) read(r2, &(0x7f0000000140)=""/11, 0xb) r3 = syz_open_pts(r2, 0x0) r4 = accept4$llc(r1, 0x0, &(0x7f0000000240), 0x800) bind(r4, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x80) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)) 03:34:05 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={0x8, 0x2, 0x8, 0x200, 'syz0\x00', 0xffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) msgget$private(0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x400) r2 = gettid() prctl$setptracer(0x59616d61, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000003c0)=r3) 03:34:05 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:34:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0xfdfdffff}) 03:34:05 executing program 7: r0 = socket$inet6(0xa, 0x7fffe, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x402000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x80000000000004) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000002c0)='sit0\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000200)={r3, r4/1000+10000}, 0x10) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x400, 0x3, 0x100000001, 0x3, 0x6, 0x1ff, 0x100000, 0x7, 0x6, 0x7, 0x9, 0x4}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000300)) ioctl$RTC_AIE_OFF(r2, 0x7002) membarrier(0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) 03:34:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x176]}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) listen(r0, 0x0) syz_emit_ethernet(0x509, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) [ 324.780719] veth0_to_bridge: Invalid MTU 251658240 requested, hw max 65535 [ 324.809714] veth0_to_bridge: Invalid MTU 251658240 requested, hw max 65535 03:34:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x20001, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x10000, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt(r1, 0x88, 0xb, &(0x7f00000000c0)=""/148, &(0x7f0000000040)=0x2ae) 03:34:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000004ff6)='/dev/dsp#\x00', 0x100000001, 0xa8000) poll(&(0x7f0000ce5fd8)=[{r0}], 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) 03:34:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000000d, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x7f000000}) 03:34:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000240)=@ll={0x11, 0xff, r1, 0x1, 0x100000000, 0x6}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="3ba1df3f7d1577ee0b8156b5b07ede34b95ecd47a1ae03d298fd6f30f4d6dfbd1c0c6e30a5a85d096d33c8940a6a3df9710b74a77688b31b68c6f704d1002fa8c9e82e2baa740614566f1e399eb6c86defc5632be3c775e9683b14860832bb8c5a06ecd328bc6540acf2d06c4803", 0x6e}], 0x1, &(0x7f0000000700)=[{0x78, 0x1ff, 0x3, "50598eb46e55b173e65d8ad9c4ff015c41556dacf37b86d0481f997631de0057b7ca584c8918f610ab26940c5918f68671616e22cb4f89a809d28b4664aa4732deb8040fda595771c2d7d453970dc2f5727646c260bad71e696dc8bdeb6c8d6af043a2d0e4"}, {0x30, 0x0, 0x8, "9f5a90056d8f4202f9e8cad9b34756675348bf0cc58db6731aaa"}, {0xd8, 0x196, 0x5, "24be363d53f19b2508dbb90534745870bb34fc3e459a0c23915f713234ed9c1716f54586f4a2fc7108e443b1efdeef52d415d1914b310a5e220898f6cd757a051b0f7919d896b7f801ca64c8eebcb04a5e19930f7d2dd6a5da4a01abc56c27262ed5219a5705c2b0023da65f5614f715cee38bc78dcc93b8d80bf380ad016afa2255990adf67e20fd008c88fee94c8a4fce672668b1589c19e9818cf69e1cf93d4b2796907e0bb8e175327805c295b2acdb4089addd1a0ac5eda90743fcfde253cc6a8f7c6"}, {0x40, 0x0, 0xffff, "a0bdd8b54f75663ad60e1501fb435fea795578daf15d3031add2b450312c85d7b23b42335e24f6923becc3c6c99fd3"}], 0x1c0, 0x20000000}, 0xd3}], 0x1, 0x8000) 03:34:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0xfffffffe00000000, 0x301000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000340)={{0x5, 0x5}, {0x1000000000000000, 0x4}, 0x7, 0x7, 0x6}) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x8, 0x4, 0x4, 0xdc00, 0x0, 0xffffffffffffffff, 0x0, [0x8]}, 0x2c) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x8, 0x40}, &(0x7f00000000c0)=0x8) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000730000009ecc112558a08a075391e1fe848c1c25e2707f693632e40bb4e0db11c2f87ffb247a15d7704d0aad742166e518c284314ef1b0d11dd84019cfeadb10db986849b847db6dc13c3b4a9823967aa370a79eec3e1e3725100a64b03163da5d8e25f856c8d042"]) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2, 0x80000) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000002c0)=0x5, 0x4) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40701, 0x0) ioctl$KDENABIO(r4, 0x4b36) 03:34:05 executing program 1: setrlimit(0x7, &(0x7f0000000000)={0x12, 0x8c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:34:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/150, 0x96}, {&(0x7f0000000100)=""/243, 0xf3}, {&(0x7f0000000200)=""/146, 0x92}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f00000005c0)=""/247, 0xf7}], 0xa) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) gettid() r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000007c0)) ioctl$BLKTRACESETUP(r0, 0x1278, &(0x7f0000000040)={[], 0x766c, 0x9}) ioctl(r0, 0xff, &(0x7f0000000000)="f04154739eea5c6612bf064e38c4b25fae2c42610a186d23f0b0f291d9e287c1e84c7f3153899b8ce49158a6e63a60b47c8785b25d2d2ef9875e63") ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000001c0)=ANY=[]) [ 325.436162] QAT: Invalid ioctl 03:34:05 executing program 4: r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000007ab9f773513f75b026995cb5913951b060fd21fe691521cbebd1a8c698a6b3a912d0c8e9bac2c72e94b3997a636b6bd007cc9603d742f3ac45f8640000000000000000000000d269a6cc85e220b912db0bf085d90e7c97a00bd0b18a9f21bf3c2b1e36615efb92494e94d491b5773d41d2d1c5f6043cbd2faeabb3a8fbf401a3704503fa1a889bed75163e31820c50162ef1c9fcc27ca1b5aa6f634d1068f5a2874ea88e5a25afb09e6e"], 0x3f0, 0x802) msgrcv(0x0, &(0x7f0000000300)=ANY=[], 0x0, 0xfffffffffffffffc, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) [ 325.473886] QAT: Invalid ioctl 03:34:06 executing program 5: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000280)="3530c193798a61ebf4b5c4eaf6021d52ccbc80abea6f1999c61dfbd4accf513d18759cdb66cf5f83d53036f34941738abab3b3b3850f2c8986b914cb1d00d380313870120ad5887fc19338e378bc789bbacf59b33282a1a885252eeed11448537d3730ccfee498aaf53b8fdb85b8d153f8b0a84127c0b2ebc7295ee21f320305bb779b5eed861bc9d0cd799ee879f741010f85e19e799cc827d283bd32e53d411505cee892f3e49caa33646178e08913573d425f1376fcbb502b5c98ad11f04e5f7cc96dd2bef7056eb0b6", 0xcb, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000480)=0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="f900000f0c000100aaaaaaaaaa210000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r3 = socket(0x40000000019, 0x4, 0xfffffffffffffffc) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000440)=0x10000, 0x4) 03:34:06 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/129, 0x81) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x1d, r1}, 0x10, &(0x7f0000000780)={&(0x7f0000000740)=@can={{0x3, 0x7, 0x5, 0x101}, 0x6, 0x3, 0x0, 0x0, "9d3c078b4b9c7c3d"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f4c4e6546000000007d95c88c1612786908655d4e1d310e524467c8a1648dd38684000800330000000000"], 0x2b) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:34:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="a0", 0x1, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='trusted\x00', &(0x7f0000000280)='procvboxnet0\x00') 03:34:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x3f00000000000000}) 03:34:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8, 0x187fe) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000000), 0x0, 0xffff, 0x0, 0x0, r2}]) 03:34:06 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='stack\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = shmget(0x2, 0x2000, 0x78000000, &(0x7f0000449000/0x2000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/36) [ 325.898056] sg_write: data in/out 34/1 bytes for SCSI command 0x0-- guessing data in; [ 325.898056] program syz-executor7 not setting count and/or reply_len properly [ 325.937362] sg_write: data in/out 34/1 bytes for SCSI command 0x0-- guessing data in; 03:34:06 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect(r0, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) socket$inet6_dccp(0xa, 0x6, 0x0) 03:34:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0xfdfdffff00000000}) [ 325.937362] program syz-executor7 not setting count and/or reply_len properly 03:34:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000223, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:06 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in6=@remote}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) 03:34:06 executing program 7: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setreuid(r1, 0x0) setpriority(0x2, 0x0, 0x0) 03:34:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40000000000000) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:34:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={"00008457711465f389a31000000400", 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) ftruncate(r0, 0x2) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x14280) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 03:34:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x20000}) 03:34:06 executing program 0: r0 = open(&(0x7f00000002c0)='./file0\x00', 0x200000, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)={0x0, 0x7fffffff, 0x3}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, [0xfffffffffffffff7, 0x911f, 0x3fa, 0x3, 0x8, 0xfffffffffffffffc, 0x88b1, 0x4a, 0x7, 0x41e, 0x3, 0x7fffffff, 0x1, 0x40, 0x40]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x1ac000000000000, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, [0x7, 0x6, 0x1ff, 0x1, 0xffffffff00000000, 0x5, 0x8, 0x1ff, 0x5, 0x1000000, 0xac9, 0x3, 0x2, 0x6, 0xd0d3]}, &(0x7f0000000280)=0x100) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:06 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x98d, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff0700000000000000000000000000000000000000000000000000000000000000002502817d8dda4b9e0000000000000000000055aa", 0x40, 0x1c0}]) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000002480)=[{&(0x7f00000000c0)="7765a44826dc9e96d90b4dece4cae36d8cdddaf91907976722725fb407e050a17058710970ce6d05d70e54b92627ca7bcb1ee2c0491ab5f36b85c49107525611abf07806a9eadac96bd5d4dba0561f72bd160733ff96c2c0fce3d7a26bfac56a8da49a6600bd192f6397def64b6ee780b0909d27ae2b7f12a3b5c4d86c0d30267dc1a4d98e49cc8c42c37155c0ac129c0dbcb4bcd7ccd2ca19a23acb2ca3b167dada537c6d37e6629f3b35b6", 0xac, 0x9}, {&(0x7f0000000280)="f832635b1a5bda1abba82e64b5da6047aa6e154b0bec794ead6be61868bb71420abe3d95ad1a10b79e4ee57f54c132fd8d049e582e123f4d8f4401565891f0aa6d357a268ad4d6ae2567b7f118d9c6d367c3f77633fea075516089b1bd9a8b9ff5589c73843b4e878cd03fc78045253dec4ec9a0c49ad09f7a5510c1f9e99b316afb9437bb3841a81f2570be6404a1720fcabe01d9b4beb57dee5c5f550aa372aff77e1938323018c5911a181d79512fecbad566de26464942dba3b081a8055f5f18e460a39aeae25ae75532659ee3a898dcc3e088b795", 0xd7, 0x8}, {&(0x7f0000000380)="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", 0x1000, 0x2}, {&(0x7f0000001380)="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", 0x1000, 0xffffffffffffffe1}, {&(0x7f0000002380)="b51ddcf994e3eb29634d7cbc6050738654aa333fd4046a4ee8508ec564da931b09b9eb436a0eac59dde7359cf5157a022e97babfd768751f45ef4a3904e500222c84abd514db6e5d40038e1326e2bc6e70f2278cb694e26c3d8c6f4c2783ce7737e53b3d439f42cb091344ebd188dd877d92bac95eb877dbf1cd4c7863350d23d5d2e5db22b77e30abe154c1151006d2efe1394249fd7d08bb09cb518f27dbfc0816bf140d23e5c69171e0ab839e9cea7eae889c4c3065fd63149b45c51da3e99755d2753c71574440865d79133d6570ce3257007e0c25098fcdcd6896a4db7ec61927a9a7c7801c4fbe5e2a", 0xec, 0x3}, {&(0x7f0000000180)="bd72f81f3103c7a590b1c8667e89961ad590bae8ca2d1bb7b937b569c7c1f3630eaaf89cb76e75f2fd685f94c5f8c2ad24561c512a34dc63ced53ae9850326e6da7999ac50fe785c8486f437c918afdb0e", 0x51, 0xfffffffffffffffd}], 0x20000, &(0x7f0000002540)='security\x00') 03:34:06 executing program 7: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1010c0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000040)={0x327e04b1c0f0b646, 0x8001}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 03:34:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x3, 0x8, 0xffffffffe512765b, {}, 0x9, 0x5}) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYRES64], 0xfffffe45) ftruncate(r1, 0x0) sync() io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)="80", 0x1}]) 03:34:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x8000000}) 03:34:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/ptmx\x00'}, 0x10) r2 = fcntl$getown(r0, 0x9) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = getgid() r5 = fcntl$getown(r0, 0x9) r6 = getuid() r7 = getegid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000400)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) r10 = getgid() r11 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0}, &(0x7f0000001d40)=0xc) fstat(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e00)={0x0}, &(0x7f0000001e40)=0xc) fstat(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getegid() r20 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001f00)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000002000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040)={0x0, 0x0, 0x0}, &(0x7f0000002080)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000020c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002100)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002200)=0xe8) r25 = getegid() r26 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004e00)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000004f00)=0xe8) getgroups(0x7, &(0x7f0000004f40)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0xee01]) r29 = getpid() fstat(r0, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000005d40)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005d80)={0x0, 0x0}, &(0x7f0000005dc0)=0xc) stat(&(0x7f0000005e00)='./file0\x00', &(0x7f0000005e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005ec0)={0x0}, &(0x7f0000005f00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000005f40)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000006040)=0xe8) getresgid(&(0x7f0000006080)=0x0, &(0x7f00000060c0), &(0x7f0000006100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006140)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006180)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000006280)=0xe8) getresgid(&(0x7f00000062c0), &(0x7f0000006300), &(0x7f0000006340)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000006380)=0x0) lstat(&(0x7f00000063c0)='./file0\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000007c80)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)="f4dc431fb34a3c5e44e4bc2e846b6564ce19127b9942b629f6103f311e5471024fd257d4a95a2aee23d4f8babd00ac35694b95039298c94e938ecfcacd11b3674c9519dd53eb2f0ead5ecae8b3bec85f9b2ba522b7a5eea13ff9eac3b064378a2fb51097ea0eb118a06a09a65f41bda50b10e6079e5ebfe9e15ef2da81523730a3eb935e59cec49277558d63538c690667bd68301d1dfe3d3337b04b6f5f8392b511d0a0eb78bfd82e64697a230a7d98654041836d92db6d1e9652a500e72899b2c63fac5f64e47cb64117c892c08b392566a40ca10217e5d72e46c1329a6472700b6476678a424e0ee47a594157fa3f52150c3a4c7240", 0xf7}, {&(0x7f0000000280)="ce0bb0c21bd26a85dd19bbfd13ff0e8ec8205b9e0e83e6351313682fbeafec90a7be19bca964bb2d9f5c425eaf7fa8f214f671ebebd8219943bd32e484f29338dc8d1865fb9a31c6420c184c63a6b4158ce6780e34898cb03b9d17e81357", 0x5e}], 0x2, &(0x7f0000000780)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x128, 0x11}, {&(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000940)="45f10a94de76534e547a07c933b8f18353e7d0a6ed24aeeecd7f09b030f11d146bc075b3d8582486dbd9c50053f4678988444e4bdb0743beb71c8748bbccaa41e9f111cda47f68d100399dddbf02e4cdc2ced85acdba4d5d082c7d69f45b516225729b9bfcf4193193bbb41dd8e06ffbc12f71267366a60f64da3a3923e20e242c29d1b237d313", 0x87}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="3c84ff03ac12f2491f614e698fe39890a19550b196dfc5e393a71a57bb28a2a70ff3f27a01b5c649d94bf4cd13e35fd542a2fff6834b3a1caf06949958180a6770fc1f841daf9cb61690c4031dc9bec8670e67af338c2c6701aa962aa13b7a24aac6ebddf9c0f298315ada82ba7e72f178f96d1744dc13e13e1ce3aa514d370a9035141d33da3033abbb7ba7742a2ce8bb88d2e37b320f6d35200e8f732fc29654f23dbe7d4512", 0xa7}, {&(0x7f0000001ac0)="5f280f091c0de32e8133c25ae56b8bf409179ee35200d20d2a8151b1171797ce3e0a6ad5ba533c", 0x27}, {&(0x7f0000001b00)="c6ee331bb26fb24e523108cd99a6aa427b92bf134cd6d884aa75692058c458e2258846a0ac8591660a144e82cf5a0348d71a20cb1d34a6ef945c85c1e7b9d02cea9eff4b684248364ca17f0d22103911eeee4c1a88395548ed", 0x59}, {&(0x7f0000001b80)="afa4ac1d7b23a32c87c1e59f4d0967ed33af65e78babf945630ba1f8f7a137d8aced1bc3da04b2b3610ee700e6e7e0d33403c434c5409577b727d1ce6933f9c73ca529d2a3bfdf87aa40a8fa7940", 0x4e}, {&(0x7f0000001c00)="6eec635ccc037b0879062a95e10d26387bd0f32a8ceae642b30dbcd55da320c19f21fde483cf43403d3a306034d8330d829724566b25fc6f850c7addce3f7f84743e8b0f26b02c0aa05ec60231da4ca70b68cbecd8a0808e750557ba736d1c294bb99909db41f5d08a81f196007f1a20e5ea", 0x72}], 0x7, &(0x7f0000002240)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}], 0xe8, 0x4010}, {&(0x7f0000002340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004880)=[{&(0x7f00000023c0)="d2442e065cc286c64296b630297a663f", 0x10}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="1cbf5f0c3d5333a723790ca28da10d7f242bd42e07c15309d405c6e8e6300d3e8c8714c061b820062900c9bd45b460320959e4db1308f685869fd1d62706fff5f999f488ad108ae5d3a140a6ae22485d9715762278b4949c3693325cbe1f0853c393cf77c4386e94bd0e7f9e46b1d0326789185cd0919b30942b4b338d4e37e4a3bf3af45d23cf1836511f29deed962839b0172cbc5a7ecdbd11a82a6c654006de1bb593ccfa8cbfa46a7b23ddf4d8929d", 0xb1}, {&(0x7f00000034c0)="39c64f604b4f102fbbd47f19b18649360ae9b970051cf67709731f8b6e34794f3c654edafef44a325d0b19abfc8daa71d4c869088c321ccd088b2fa0f130ca00af55326e5d89ce496f5660ff1c3093d751c5936c10864681db69515f5a742450d4e3eb15fa5d8e29beeab4b8ebef7c55ebb3ca64fe8311d16eabc01f41d5ab3a2af21fc330acd49b85b86cd722427aec4eed0d3fffc6ee3fddd616715a3c38089cb75f32cd89d300fb8b4981f1b9ab7056750a0ef125d6c9156234103e79ea8158d53fe01a486761677e8152a5ac000ee16c71776706302af3e72f4cb2143161de35ae2887ac0e95c4680def78d658c07a4912", 0xf3}, {&(0x7f00000035c0)="7bd0953f332cee9f07a964becbe9", 0xe}, {&(0x7f0000003600)="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", 0x1000}, {&(0x7f0000004600)="159a333506b86b7f8a4bebe1d656285e314ca8d95151d3adffec0135701756d58ca3a34e7964af6c10078d6eb61d717eb706a5c5590f121fb2eff575a41f36aa009e2f8a61b1d82494e0a6a410", 0x4d}, {&(0x7f0000004680)="cbcf6c29e96fb1751fc64e036ebd4ecec7461b8b1929583b94b7f94cb745ee0ec6f95166a3c79c042b41662eb036354e1954f70b402455d6445797155622f906c090078ceaf95f446d602acef8be50f8578c325c8b76071d7556db60d4e17871b0557ab8c424b92e13d97874ac73c97e5ab4531eb10c75b3d7b9b192ee27a0025a5c3b08d5c6afc78a0af87b20130d2175b97b455fe3e1fda495555ad6f03f669dc7731dea5d60cc0c5775fee0146829db60f4d44651be9feab63bfeac4a5f99a0deac1edc06a1a3ad28aaaca6c294e8ec5f80b36f40a72708a5ff6ea05d96647ef90ee2ab2e03c8e6878ae827d28d33d2cf58e0148767d6672b", 0xfa}, {&(0x7f0000004780)="efbf590c920f50a30a6f63ff886b2a4a875afe55ab3844ba2b7b733ee14d718194373b4a875cfc0763d27e7b1e205037e466f2f423542231982b182431388879457ad880148c2384aba7ca5e84155d612beadb19ba4093547db34c8ab60b95a46e981854ad74b8568cbce3fead", 0x6d}, {&(0x7f0000004800)="90f19af9f668980da649a0babc0ddf7ceee3f383ce4e4ec6f6c46ca80302683429d865a0ef8a6bd0be555cc8667159421b34b0aeff20c3f45a21dd3ec20654033d114f46c616d94dbde6af950106bb4ad14181b8", 0x54}], 0xa, 0x0, 0x0, 0x8040}, {&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004d80)=[{&(0x7f00000049c0)="1054f70086f2279d690a97ee2d7006b2eae84a7db7fdb4f0c81d1feede67e2006cf810963003d5879ffdebb8cd4c1055716b141ec407541a72b3b2329ea7222c4286aac2dbe38ad4570c21de835c87f7e11d0c7d4f203dcd4ea7f2ac8d11d62bff4a80c782eb8b26adbfee01d871ac29f9e88ba73e38d7212dfd1e65b18380b3bbaee55d80eef265bb02711be4a7e926697dc42f286b51040f0462bc67df9bc800d17fe5f877b5a6040bd6e0a8bff0baffb06ee6a4e5fd740d2c2518419c22465a061a1a42ed5a997d8a4bd16c608091f7bab7b5a136c79b273ad984a8068c5220", 0xe1}, {&(0x7f0000004ac0)="28fbb418e2b5d81f89c0f71b919111e2a0dda9da7f30f6450b001286ccca35ca4644a9a319171b026acdd4cc7ce9e51aa7c710fd1f198a1da50fa22982f84acc2c7a5b930a4b9e0d5f547b2f551e565571633d5b4a86801253e1a9ad042ab7bdd2bdafbd8f191ffe11cb3f85cf4b1e8c4b65880b3581feceb6c76fbb07ab505db4a557c63d3bef0489110b0ae40eaa7883906872160ed4927c35ab4105090d6ff27da663bb8f1dbd77714492d157c51e495c085a1daf435c6f7190e02de195f8376d09b8c286a33b9e07ef3b97cf64a4fe", 0xd1}, {&(0x7f0000004bc0)="9706dee872c8d5cb1412ec97dc870bd61d85ed53a7fd", 0x16}, {&(0x7f0000004c00)="2846ca05aee479c702b8faa87527eb26a014e6756d033f57425c4096d3f1d9567b44a9ac3cb426a86c6c72a7721880298f2837dbb19c5ceb88566d13eac8d94e604cc28fa173494711d743f080a25a57409c3a3f42e3", 0x56}, {&(0x7f0000004c80)="6a3f3a4d3acba42f651edd19270aee81b096475cee54256b557d120406eb7269f8a61cc801ca265a5530c2fb498fbd2634ea6ae3ea77810c", 0x38}, {&(0x7f0000004cc0)="24431e123e8d26753f18ecfc26cd21a6eff5ce15b259488e5a5bdde3f1f30c77dc1e41a98766f01213fa8c60c94501b3711e2c34f9d1c1d66e414f5b1e9470d4570188f92ce7dcb129d122dfccf887c14aed134758abd6076a7950c8afdd1a3be1502c26eaec3c45c6ccea4b3a81f50dfb773f1bbfe2f84b830bb858811a09e4f5b0622fd36b2cbeba6cc35aced44d0a91aaa4966f91", 0x96}], 0x6, &(0x7f0000004f80)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0x88}, {&(0x7f0000005040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005440)=[{&(0x7f00000050c0)="299d61d301ddad2620658d418e3860404c056c4db74c4d88097c3febe6233bac3f005dbefc9e505019f0bc2148714563932d68ba325e20482acd3290a4e6e2b17692264d6e0976492b6b2ef0eae3b761daf56c531b9aa464bcf3e44dee82381c5eb0f887e94e88003311a8a2b89f1ee812f66f0261d4bac229e65ad3bc8f5d024b1a58491ff67c87ff1b6a69bdc1229d876840832a9c13eb61aa13f9bf372d89dc0216dc34eaae012ea08ae2119f2754e3f59c415a290d0ceee0ba27f34bc3e32d58ea115de6ed83cf27b52dcc2d9fe04de92a90c5828d425fc002c223ab635cdb37d8b7ac13a4ef", 0xe8}, {&(0x7f00000051c0)="c5f6343b5d3215284d05ab394d752b32db6368ca2b73d50de17f66d9db6834c2409001cf1da3563c8729ac503dfae9af07008ad54a38843c860fa70f8ce9c248be22fa1f8d7ae78d3b28622b046f2d3317c610c922dcabf01cbce09db39d5b2fd41e020edf88cd3f94f174c85fa70c26b4bdad1017a2cbbddfe4d427ba3a88ff12f78b7ba9ae5c779cf4adb7702ef029e0be5412e7ad426ed452f354e1319f4827045a2380701646a6b91265f7", 0xad}, {&(0x7f0000005280)="1d489e638f83f90bc8b89ba2bf0de84362320d26a714dfb3ad24f5a92d72704c1cb3d23abc762fbe5d4665f1384448ed3e0ce112df8809a9fa42354bdfdcfa7e4766d0ecae25ea6358a28211df8c72370f2231958fd7221748fa32868060af807a525b65c598ae93b87c88d72058c98c54c4108f44199ceb1d95fc58d7bc6a41da8497125b2fb326e869b38ea8e5f84dc65aeb602fb6d89b14fd731382f8c441b53da23dd0f31ff4fc5f1efb94ae8a0ddc753a86172d884b12d6cc0820999a2c50d4b8b34ff708252e1396ce21ef800c996742f60e5163a7370b973121b0c4b7c7ebf81bc628e9aeb9359993fe088a1eac4b282f99767bdb", 0xf8}, {&(0x7f0000005380)="06b1149d0bffd2d8ccea3dd4f7033c9415c388af229a260e32821af05def781bd4364623c9db28af21", 0x29}, {&(0x7f00000053c0)="c37290ab340e44312da582f5be6c7159a488262d5fa739acfa6e2e4812c8716fe2d3230243622cc866db16e9b123920f4cad53a3dccd1f25cbed1c4b08e269c318b3242d242f1d35828f500a5c63fa8d197ca42ffad6b2e42c47a9467cb7", 0x5e}], 0x5, &(0x7f00000054c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x20, 0x4000000}, {&(0x7f0000005500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005580)="887d96c38b920f73cbaa86b771c87106ab71dd9a03094841010a58480adabce93fdd04b28a02962c923da5e388ce5d6de0d587d0f24d45ac58c0e70c1bd830149af2174047d59f2e46b3a7bd0a720d75", 0x50}, {&(0x7f0000005600)="17a8400f76e9e298c4976d35bd36735bf25175216cf76709a364b2f93ad4f0dbdbcac5a136972e08de2230bc494ee4bb439abdbb1bcf5deffbf081acc9ed203a9c3a0d20e92ca0e2c5b4601dcf62b3127e5906e7f7fa8053fc1add99b6564c6decf1e0f81acabb56c823f75ff95e8814b3150958750c3f7e8c2d0d0e4f4f592f897da3cb614823cd5c8fa5ceac04dd972070bcd7d9eb94ec0ef62c1a86b5278e97e35cd141380c7ad2bf40d8d3f8c7f4ffea9d9fd540d28a0ec28e2253db811e0c6ee5a3da0aa6512be667f242c4611037764996c2c4cad92bb111962e81f9cf221e4e7620", 0xe5}, {&(0x7f0000005700)}, {&(0x7f0000005740)="624dcaa9e105f331b6831836ae60e668cc05699e", 0x14}, {&(0x7f0000005780)="fa22ce19e2e99da159359f824b284a1727b50bc8350bd508dd2c73217b123270f9721fdac03443c46f293dffde490e8ca32ad3d2ead0492dfc29cda33d56b191dbca94fd65f226668e11abb53873b4e63b01c423bbda1fc533e1cd3e7fc91a8be3acf4d5e192200131679a26dd6b8f2337aac0e8e335aedf7edf7746928607910a2fa372f8d191e075c5aff6e937ff70e98e4df03377965667ff893527c46b704ff1c5f9e2053892ce9808655b62987e99fe79b77fd3859a3843399b57c2851c59044c97f043b10df2afdab0aa6d5cbeeae225220ad0ff39c386ad76b7fd9f275c9d50f2eec6bd9a7cbd57f8badcaa3854224a65444d4f1f0c316eefdfc0b1", 0xff}, {&(0x7f0000005880)="a56d332168afdd96025310beb9270796bead602956b5472711a768f452d3bcf5c1b81410770de06126364dde64511075abfd2270edc7806953b20c5d4c2ae414731d201897290a150945a5d351f0a3a81b116a9d9339da0d4c1c1ec2ae5e9afde441d49aa5bcb78acb4e03fcb53c757d34211641d9fa29a595199361b15b6afe0170621e7a63b6bda10f348fe16ac3d4a4ec5e8ec72e81dc66475bc0d7573a0d249b6dda6017781c1b5fa60489777eefa8f7adf0dd858c8fe976a21bb1af066a8ade71d1498fdb635c3a", 0xca}, {&(0x7f0000005980)="b64a99cf6f0da40dfc822f991fbde900fac68b476885f08353f3cc96522c7c22bbda3748cd5a28cbd95ba9a973e9727f700439cf387f1ca77c59caf1cc7247c3d788a632b4430d08613b39ec599075649a3a451404a4513b33fc07720e7899abb8b3e4f36b0b4fd6d441e60b1238cc7c5f5d213393fa73439c16b394cca07cb53f511d16cbf73557c6f80f73e10eaf445d51ebc576", 0x95}, {&(0x7f0000005a40)="543a349210adcf68470cc5854f08ac77e070ad9ae3feecca152e2535e89d0ee24b849d6a53e395f8dd703eff95d1d45a3368a860e08b444c8a4072468d69a25150b42ebd93881b80cf75bd923bd1475747f9264b5aea5adf701f155a2ae37ed93f10deb6f32a0f540eaad5e6b02a72c1a77f290dbbdba3cd1e9c4754c972e206759fdcf8f44816a620ff6bb0199558b96819a95bcc1f8853408d2c29280dc63d2d046c2a41b2d845d417ee9d3748effef02c16920d2a68c90948f4e2aa7f4b3351ba6e2ee8c6093be3c15825273926af213a6dbf8d208530964be01082435ef916936fbda4630bf3a92697b1437ef93ec093bb23", 0xf4}, {&(0x7f0000005b40)="bb803d", 0x3}, {&(0x7f0000005b80)="1cc384fe199e06a38e12c6f2cc696b65e7aa73d75e4a09825ca4b716c3ba1ac8bb47081cbceeee500ec01a4bcb2e673f9be1e5c07fcf120507bd05eff34507545272b2f2ecf25c72bd692530179e7ae41b619fd33fe5898f3c0aafa7dd2e2d0fba767da6e1fc04b0b016a9ed5694ac94928f", 0x72}], 0xa, &(0x7f0000006500)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xf8, 0xed39897eaca0bf18}, {&(0x7f0000006600)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000007c00)=[{&(0x7f0000006680)="b079eb4fc412914610f56b1c51c17c6effbc275258f3912fd55c21f9e6c72a8c88722fdc58041be6c699d45e82a43297256a1e6ae84ab2ea6ce59f78d57475ef66aa929693287a191c9fead917eeeaf4b35fc222f48651aa9f94af03730385bae27d309e2d454450a58d67e2069be14469aaa5bb7bc0fae56b1672f217997421cfee869b072125fc62b34079bb734b3a09754a1b0c4a2c3fcbecb1d10b36acf21335fe50", 0xa4}, {&(0x7f0000006740)="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", 0xfa}, {&(0x7f0000006840)="f3f0fd084fddf0e1959f279fe34185a381f90fac35027db692e59412cdb39f52ef102b146c76583b8e64c5c46afae4a26107a48c3e19c52a1af53aca46431a2e1c381880115572e7ffea28eb9541336ccbf15c344cc03aaf371ffcc92ec0aa73ad6a9a0a0ad54b9cb39b56a0a8a910f96f47756ab6abf056cf05fb15c9655f56", 0x80}, {&(0x7f00000068c0)="bb00fc53031758b29838598f845c5e6baf1ee0c4191d0796b74f3d4e29288f8bc9d634f485fa01e80e3685174983ef8025fd6191e56223e8e8abe29155c15fe37b862442f2e1dda8c1193f086fd64dbfd371124affda5995c2f82ef33784a0bbf539e31ee32bc015fb08e3c8a0b54645e35a598952424d111780a47a03cec721825606c75323467ad642de54bab8a3e7774fb3ee72a0e509a2ac5ac5beb641af3e54fcda90e59899807556365d450e6bd125fad88cca2ea5fe39e63ae86a3e6928ca88a0cd06a4d669860550b8644a288245c0dd4224b90a21d4dda877", 0xdd}, {&(0x7f00000069c0)="c5eb242db64560d244829b95998e2d0d85ccdb7c9699a02eca7cf0695155462d2de16d77838a41ba1bd404b723cc943cec6f7eac6d2727b2668fce50f43bbb007705de5c7b43e426da4059a189e6d901511597a7e1605d52223dd5832dcf6da02a63e6e669ba3b530208006aac6908d35ecac88629e107d22a90ce75be896f5c992e5a72ffc3bf074524b1bb6dc028adbbd58d11edc880bb9fd507ac96b18fd3c9cc34b0d308ffd49250f75c7b8b2237bcffb4537d88aa23e34bdff5", 0xbc}, {&(0x7f0000006a80)="219883caecf16c4f209bb4ab0d71af8920a85fad969d543c233c6de424abee13badeb6d9ed929dadc86d395b1292226b76c41a56d47ec10c30eefcc00ae1fad1ac554831d223b1bed8c3e0a9041663", 0x4f}, {&(0x7f0000006b00)="2bcc712127ab6cd7456756504e35eb7e3e399a3851d5d22805f48fe7eb4df3b64dd2b91f873dada436f5e51b47d151e8cc556d81d41f552612da51240f846007ac5cab529f962b7a0423a36f194bfc93449c5c206df37d14f9a8c2e57e93273eb515941a92d7c089414e18d165c902efe58e5fc61c8a413ab96a62e95efa1ae7db0cb70e1e8c1dca55be946200e49550b37791098196e7ca69c9d65b1ef61aa110f8c72dc596352be8bc3d3288b13deb05b34223f7455e6553e5fc8be765659de16bf4dd36f147a8b55dadda01a83429dc9d9990b48180fd383876c7ec4ca359ffc2113277e5e0fbda85ba008d96f1339746705d9cd2e452aa", 0xf9}, {&(0x7f0000006c00)="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", 0x1000}], 0x8, 0x0, 0x0, 0x4}], 0x7, 0x0) r44 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r44, 0x5423, &(0x7f0000000100)=0xe) ioctl$TCFLSH(r44, 0x80047437, 0x709000) 03:34:06 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x1, 0x400) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000001c0)=""/92) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000000180), 0x1000000000000010) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/201) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 03:34:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x7f00}) [ 326.590823] Dev loop1: unable to read RDB block 4 [ 326.595790] loop1: unable to read partition table [ 326.611840] loop1: partition table beyond EOD, truncated [ 326.617412] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 03:34:07 executing program 3: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r1) r2 = socket$inet(0x10, 0x3, 0x6) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000140)) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dff00001d85680c1ba3a20400ff7e00000000000000000000000000", 0x24}], 0x1}, 0x2) [ 326.682371] Dev loop1: unable to read RDB block 4 [ 326.687388] loop1: unable to read partition table [ 326.692881] loop1: partition table beyond EOD, truncated [ 326.698443] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 326.721861] FAT-fs (loop4): Directory bread(block 128) failed 03:34:07 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x3, 0x800000000001) r2 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x801) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x8, {{0x2, 0x820, 0x0, r3}}}, 0x28) getsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 326.756719] FAT-fs (loop4): Directory bread(block 129) failed [ 326.779585] FAT-fs (loop4): Directory bread(block 130) failed [ 326.786325] FAT-fs (loop4): Directory bread(block 131) failed [ 326.803873] FAT-fs (loop4): Directory bread(block 132) failed [ 326.817759] FAT-fs (loop4): Directory bread(block 133) failed [ 326.835105] FAT-fs (loop4): Directory bread(block 134) failed [ 326.854218] FAT-fs (loop4): Directory bread(block 135) failed [ 326.864523] FAT-fs (loop4): Directory bread(block 136) failed [ 326.880134] FAT-fs (loop4): Directory bread(block 137) failed 03:34:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000013a, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x4000}) 03:34:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) 03:34:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x4100, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x20000000000001c9, &(0x7f0000000400)}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x200200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000200)={{0x2, 0x1}, {0x81, 0x8}, 0x6, 0x4, 0x7fffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) connect$netlink(r2, &(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc) 03:34:07 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) sendmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000100000000000017010000ff000000e03b127f0a8c96ec30778a79dd0924eeab861740eb165dd7c5691207625215c8d2dc7a2ca686c9b0fbf423e1f3aa8eeccbb6c832d3f0f740747044ccacc950dfcaed2c67f134e53dbd7418a3875147ed84f20248493e86537990d06729c10dd26a90a3959c853edf67ba2ad60b0e16ff6ffb578da8acd1928d5b756d7bc25514bef2dbc290491b504bf2ce2399a06b8b42c62e9e55e49f262542d258beb7e10e08d6384930e0ed1bebbf7e51a7a8381d9d4f2f0c66e2f927c460d05400000000000000d8000000000000001901000001800000000000000000000000000000000000000000000000000000f4a4cbfd9cf131ea0000e46c0a0a00000007d080c2"], 0x110}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x4000000000002d0, 0x0) 03:34:07 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1) fstat(r0, &(0x7f00000001c0)) 03:34:07 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x240000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @local}, &(0x7f0000000380)=0xc) bind$packet(r0, &(0x7f00000003c0)={0x11, 0xf5, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00c9ff2700ff00800000000000000007000000848d395913e947e5858dca5f439d87ae4592e186c6414e2a33091555494e50cc3b807edb71037d4f2353d803000000000000006b0f0522055cdbd65f2e93d454031f9023502f80c287db4d00fc1b79ee892867c7da2c71e2f2ddcd084c5d216dfb22395d8f32a833120a959b227bdac2d39aa69257"], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0xfffffffffffffffc) clone(0x0, &(0x7f0000fbf000), &(0x7f0000001800), &(0x7f0000000180), &(0x7f0000001700)="05280c62c2524d92fd1b13220620c4e6bd8e6a24874054b4e5a1146999e20c8c4332af9c2130d3d6827f2b1ba8b4ebdd53a87f2d35ad98e3deb14aeb1a98917568a39acc8fd62dcc8ab6616b4f1561f2a927ff70aa541a0b70e51bdd283e7a0a2a86cd10868dea9434eb6fd2bff3f9e8d209bf439c3c5488796544605b01f5fa794fb3d7885ef23350786eb31ebe9873dee4003719b283c152a9a4cdccbe9892f07f5db48e0e1a1819bc314466afb1f097bc03db5f65cf948a6ed2d9972a6c2925cae831a5fd0cfab78245ab764abb62e8e5b0") mknod(&(0x7f00000000c0)='./file0\x00', 0x21040, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x800) socket(0x0, 0x3, 0x4) r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x215e2ae2, 0x80) pipe(&(0x7f0000000300)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0x2f, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x0, 'rr\x00', 0x1, 0x5, 0x33}, 0x2c) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r7, 0x1, 0x12, &(0x7f0000b56f40)=""/192, &(0x7f0000000040)=0xc0) r8 = getpid() ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x4, 0x401, 0xe34, r8}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0xfff, 0x1, &(0x7f0000000400)=[{&(0x7f00000006c0)="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", 0x1000, 0x8000}], 0x40, &(0x7f0000000440)={[{@journal_path={'journal_path', 0x3d, './file0'}, 0x2c}, {@discard='discard', 0x2c}, {@data_ordered='data=ordered', 0x2c}, {@noblock_validity='noblock_validity', 0x2c}]}) r9 = dup(r4) ioctl$SIOCGIFHWADDR(r9, 0x8927, &(0x7f0000000680)) 03:34:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0xffffffff00000000}) [ 327.589351] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 327.716973] FAT-fs (loop4): Directory bread(block 128) failed [ 327.748368] FAT-fs (loop4): Directory bread(block 129) failed [ 327.778448] FAT-fs (loop4): Directory bread(block 130) failed [ 327.809130] FAT-fs (loop4): Directory bread(block 131) failed [ 327.834724] FAT-fs (loop4): Directory bread(block 132) failed [ 327.855115] FAT-fs (loop4): Directory bread(block 133) failed [ 327.866839] FAT-fs (loop4): Directory bread(block 134) failed [ 327.873013] FAT-fs (loop4): Directory bread(block 135) failed 03:34:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000140)="2e2f636f6e74726f6cff05", 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(r0, &(0x7f0000000600)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x2404000008912, &(0x7f00000004c0)="2957e1311f16f477671070") mkdirat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0) renameat2(r0, &(0x7f0000000240)='./file1\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x9) sendfile(r4, r3, &(0x7f0000301ff8), 0xffffffff) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000640)={{0xa, 0x4e24, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, {0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x2}, 0x6, [0x9, 0xa55a, 0xc3, 0x5, 0xaa, 0x1f, 0x6, 0x5]}, 0x5c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4000000000000c, 0xe, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x396, 0x0, 0x40f00, 0x2, [], r2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0xd7, &(0x7f0000000280)="3c2dbcd405e8e96a639a2feea71b", &(0x7f0000000380)=""/215}, 0x28) uname(&(0x7f0000000500)=""/229) 03:34:08 executing program 1: setrlimit(0x2, &(0x7f0000cc0ff0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) 03:34:08 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x800, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000240)={0x4, 0x7, 0x0, [{0x2, 0x6, 0x9, 0x80, 0x5, 0x100, 0x8000}, {0x7ff, 0x4, 0x8001, 0x6, 0x7ff, 0x38d, 0x400}, {0x7, 0x31, 0x7, 0x7fff, 0x80, 0x10000, 0x4ea}, {0xff, 0x1f, 0x8d1a, 0x1, 0x4, 0x81, 0xaad}, {0x1b97, 0xfffffffffffffffd, 0x2b, 0x0, 0x2, 0x2, 0x9}, {0x8000, 0x1ff, 0x7, 0x3, 0x0, 0x2, 0x9}, {0x3, 0x0, 0x8, 0x4, 0x3, 0xfffffffffffffff7, 0xb4b}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)="14ebe52c433c6a64698a3f04c70c4b7db10ff17f9b9c2d33242819a368418f9bb0fe9b2d8d6dcab5e65fe07ab19f4ed21c5a4d31065e", 0x36) r3 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 03:34:08 executing program 7: r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendto$llc(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000dc0)=""/60, 0x3c}], 0x1, &(0x7f0000000e80)=""/98, 0x62, 0x10001}, 0x8}], 0x1, 0x40002160, 0x0) 03:34:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x800000000000000}) 03:34:08 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:08 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000180)="6e756d615f6d61707300f00400004e8835179ba1ea60d7d316a842cb0ba49df5efe2f56b4bb22c4a4786f262e95f256a873a24011400") readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 327.879720] FAT-fs (loop4): Directory bread(block 136) failed [ 327.885991] FAT-fs (loop4): Directory bread(block 137) failed 03:34:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000041c4ea3a197000000000000000000000000000000000000"], 0x176}, 0x1}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/connector\x00') syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x1, 0x200}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @remote}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@dev, @in=@multicast2}}, {{@in6=@loopback}}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000008c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000240)={{0x1ff, 0x374}, {0x6, 0x30000000}, 0x4, 0x1, 0x6cf}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000980)=0x14, 0x800) [ 328.001421] mmap: syz-executor1 (22615): VmData 18518016 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 03:34:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000001b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = semget$private(0x0, 0x1, 0xa0) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000540)=""/239) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x6, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000300)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x4, 0x101) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x5c, "3677d337e5569360e847996201c81ef1469afbd89520574374eab8738d69d78f7992bf7bec95f927219d2ba377d74f7ebcb3c7931295a70e3fa4b7815f122f948e297388b62fd4203483333f8fb2069aa09e63946d61a3bc66622044"}, &(0x7f0000000100)=0x64) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000003c0)={r4, 0x200}, &(0x7f0000000400)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r5}}, 0xfffffffffffffdf4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000200), &(0x7f00000002c0)=0x68) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x33, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000480)=""/174) 03:34:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x2000000000000}) 03:34:08 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x3c, 0x1, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, r3, 0x0, 0x0, @in6={0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0xe59}}}, 0xa0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000380)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) [ 328.198476] FAT-fs (loop4): Unrecognized mount option "./file1" or missing value 03:34:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x101000, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x3, {{0x2, 0x9, 0x2, r3}}}, 0x28) 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0xfffffffffffffff9}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f00000002c0)=0x10) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = msgget$private(0x0, 0x4) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000000)=""/13) 03:34:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0xc) close(r2) close(r1) 03:34:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x1000000}) 03:34:08 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:08 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet_sctp(r1, &(0x7f0000003b40)=[{&(0x7f0000000200)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, &(0x7f0000002500)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2=0xe0000002}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x204, 0x3, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x202, 0x5, 0x8c4b}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x16}}, @init={0x18, 0x84, 0x0, {0x2, 0x8000, 0x9, 0x46}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2={0xff, 0x2, [], 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1=0xe0000001}, @authinfo={0x18, 0x84, 0x6, {0xca6c}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2={0xff, 0x2, [], 0x1}}], 0x118}, {&(0x7f0000002640)=@in={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10, &(0x7f0000003ac0)=[{&(0x7f0000004bc0)="cd3c048a703d1d029359ba4fb5d11be61b7192346b9d65597961fdafad1459bafa7eca98037dd851e22d09f3792f0d4d35bccb69c7b29dfa7f0631b68816da6383b465839f81", 0x46}, {&(0x7f0000002800)="87c7fc3984367c57fd351ba593dd139a9972c1274a5cb0fefbd2e00f0b98ebdeb852e49459cf316ed8ef490289d6e0d77d860381c485b753555847d13148917e08575f0909bc51a731478687491ca9f21ef3ddce9f415e756fae36cace9bf35a9902762130a7ff7d7a9081ff90d0bdf437b42e3759a860ed76aca97cf769597d802f7dcb9dbf9e180ab0ae944222d2035cb713b737ebf10389ad8361b750ee04d35c3b7541eeb88149adc7e25220b5d2bcf102a1b4c6fa859b11fc272669fd4fe5c47311e77daf428319562d4e32dbe85ccc733bd933bbd0e452213619c1d7bcff656064abba0efb4ac83d55320908277007c39f26", 0xf5}, {&(0x7f0000002940)="2faaa0877d1e242ed97f3a0ffd9f6c2510698025ec757860e5161e3d4d7905fb03622069315250d6ee638e1afc08b7366eaa9c803e4db1f66f6a3460a695773b14f3d372c7", 0x45}, {&(0x7f00000039c0)="75a6fcb6b1bf15a32622323e256f1e8258cd6bc131a0acd7cdd2acd5db4a5bad1670a303d628102bece2f7b20c3e422186b0bce132f03cdca2795fa84160597dad5e4d10381178aed4969a84d1bde40003b536cc197d8cf1d88888e431221cdb52402861ae3138f49a6557683356a00c23167428ca77f3de85443b4c86f3e7c4fe583bc94401a36914c2b9b073fd1b2f20b752138c523dc1d3bb250bac5efcff178e3791ca656e8dd44e0c00e438b945652d1cbba3fc45ebb4d0daa2173b06681277110ac6a9d7c79fc0", 0xca}], 0x4, 0x0, 0x0, 0x40}], 0x2, 0x0) 03:34:08 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') fcntl$notify(r0, 0x402, 0xc) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x4000000000000000}) 03:34:08 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x10, 0xfffffffffffffffe, 0x1000000002) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, 0x84) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000003c0)={'filter\x00', 0x0, 0x3, 0xff8b, [], 0x1, &(0x7f0000000300)=[{}], &(0x7f0000000bc0)=""/98}, &(0x7f0000000b80)=0x78) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000000)='./control/file0\x00', 0x1) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick=0x401, {0x0, 0xfffffffffffffffe}, {0x8}, @time=@time={0x77359400}}], 0x30) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() socket$can_raw(0x1d, 0x3, 0x1) lstat(&(0x7f0000000480)='./control/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) stat(&(0x7f0000000900)='./control\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000009c0)=[r5, r6, r8, 0x0, r9, r10, r11]) lseek(r3, 0x0, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000a40)={0x2, {{0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, [], 0x18}, 0x7}}, {{0xa, 0x4e20, 0x100, @ipv4={[], [0xff, 0xff]}, 0x100000000}}}, 0x108) lseek(r4, 0x8000000000000000, 0x1) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x800, 0x4, 0xbdc, 0xad, 0x5, 0xdec, 0x8001, 0xfff, 0x878c, 0x6, 0x0, 0x5, 0x3, 0x7f, 0xffffffffffffffff], 0x2}) socket$nl_generic(0x10, 0x3, 0x10) clone(0x0, &(0x7f00000004c0)="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", &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) chown(&(0x7f0000000a00)='./control/file0\x00', r7, r6) close(r3) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x3f000000}) 03:34:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000017, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000100000d000000"], 0x14}, 0x1}, 0x40001) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0xfc40}, 0x1}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000100)) 03:34:09 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x0, 0x212001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)={0x1, {{0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x6}}, 0x0, 0x7, [{{0xa, 0x4e21, 0xfffffffffffffffa, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, {{0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x8}}, {{0xa, 0x4e23, 0x7, @empty, 0x3b4d}}, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0x5}}, {{0xa, 0x4e24, 0xd2, @dev={0xfe, 0x80, [], 0x1e}, 0x6}}, {{0xa, 0x4e22, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x200}}, {{0xa, 0x4e23, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}]}, 0x410) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)=0xff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4840) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000080)={0x67, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x2, 'lc\x00', 0x0, 0x7231, 0x32}, 0x2c) shutdown(r2, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x4}, 0x8) 03:34:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x40000000}) 03:34:09 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x8800) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f000044a000/0x5000)=nil, &(0x7f000044c000/0x4000)=nil, 0x5000, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') syslog(0x5, &(0x7f0000000040)=""/246, 0xf6) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x3, 0x80000001}, &(0x7f0000000300)=0x10) readv(r2, &(0x7f00000001c0), 0x0) 03:34:09 executing program 1: socket$netlink(0x10, 0x3, 0x0) 03:34:09 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000100)=""/50, 0x0, 0x2402}}, 0x68) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast=0xffffffff, 0x1, 0x4, [@broadcast=0xffffffff, @multicast1=0xe0000001, @empty, @broadcast=0xffffffff]}, 0x20) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000040)=""/80, 0x50, &(0x7f00000001c0)=""/142, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000000)=""/24, 0xffffffc7, &(0x7f0000b4cf9b)=""/101, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x100000000000000}) 03:34:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:09 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4800) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7f) r2 = getpid() write(r0, &(0x7f0000000200)="536232ba0e126bac00b60afffae0f61593fd5a318d9e219d32d48fea05ef345154b230b7e5a0016663534cf372bf1a433ee511d1eeb772ad6cceae41a03e3bb7cf9f6eda55368aa664cf559b1886af737be5ece545c1813e108098b4922c6c4c35e128098e5dfcd19d597d42c49adf8a4467f1f0dcb2f2c4116ddfca6e2d6c2934b2d9f46f46d9191f29ad9d2bd8d501153bb486ac395ce8c0566ad7", 0x9c) timer_create(0x4, &(0x7f0000000140)={0x0, 0x40, 0x0, @tid=r2}, &(0x7f0000000100)) timer_getoverrun(0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0x100, 0x4) 03:34:09 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x2}) 03:34:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f760070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8e00, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) fallocate(r2, 0x0, 0x80000, 0x10000) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1c3, 0x0, &(0x7f0000000580), 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r8, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'syzkaller0\x00', 0x4}, 0x18) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000), 0x18) 03:34:10 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000002a80)='/dev/admmidi#\x00', 0xb, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000100), 0x4) gettid() epoll_create1(0x80000) lstat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)) sendmsg$nl_netfilter(r1, &(0x7f0000002c00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x40a00}, 0xc, &(0x7f0000002bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fstat(r0, &(0x7f0000002840)) getresgid(&(0x7f00000028c0), &(0x7f0000002900), &(0x7f0000002940)) dup(0xffffffffffffffff) r2 = userfaultfd(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2), 0xfff6) fallocate(r3, 0x0, 0x0, 0x8000) dup2(0xffffffffffffffff, r2) creat(&(0x7f0000000000)='./file0\x00', 0x0) 03:34:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x3f00}) 03:34:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001b9, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0xfffffdfd}) 03:34:10 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) r1 = socket$pptp(0x18, 0x1, 0x2) getpeername(r1, &(0x7f0000000180)=@generic, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) prctl$intptr(0x3f, 0x7) 03:34:10 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:10 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffdbf, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x4240) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000300)={0x10004, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)={0xfffffffffffffffd, 0xce, "08081b4f1cd384f2ac7896051ad0d9c23536b3e3240656ee73d0947fde0420c7f84628cad64250021e40fe3d3b4947584c18d6dcddb617e35db1aafbfc2b454a68fce56d42a4fdd2ed4055563b68999da50ef2f351d67d64f7e28f2bfbbe395126613278e570ae6c668c10ee5afe25f9606898674839decda004d14fda01ff1fcdddf9968ab376b5ef42ff6cf6897b56535f3ac3962ea6a3c23f448123681e1f66c37b092e36d243d13b0214d6682d8988b3328d426b781eaef805093996f1abcf78a805acb8411a5a433f0b4838"}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 03:34:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) write$binfmt_elf32(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="83b40000000000007e66f016923ba1c04eee5cdcaf78922efde57aefe5c7718e280d45cc7d4797eacef2be7e27f3333a02a71692e1d1a7d4d492d9fe29468d7935f24ae25633e2ba3080848ad33154d4afc444f766bb6f5e526b9ce85af6d3eb4539b090562e9fcb334ccc7f7ab60cd01dc52e37738fc717"], 0x8) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000010}) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) 03:34:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300), 0x23d, 0x0, &(0x7f0000000280)}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0xf2, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f0000000080)}) 03:34:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6159, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_crypto(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=@upd={0xe8, 0x12, 0x200, 0x70bd2a, 0x25dfdbfb, {{'pcbc(aes)\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x3ff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4815}, 0x8000) r2 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x6, 0x200) sendmsg$key(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2, 0xb, 0x101, 0x9, 0x1d, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_address={0x5, 0x7, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e20, 0xe4d, @dev={0xfe, 0x80, [], 0xb}, 0x2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x6e6bbb, 0x8, {0x6, 0x0, 0xfffffffffffffc00, 0xfffffffffffffffa, 0x0, 0x1, 0x0, @in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x331, 0x69, 0x3, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_x_nat_t_type={0x1, 0x14, 0x1ff}, @sadb_ident={0x2, 0xb, 0x6, 0x0, 0x9}, @sadb_address={0x3, 0x0, 0x6c, 0x80, 0x0, @in={0x2, 0x4e23, @multicast2=0xe0000002}}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd27}, @sadb_key={0x2, 0x9, 0x18, 0x0, "afbca1"}]}, 0xe8}, 0x1}, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r3, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000040)=0x80) accept$nfc_llcp(r4, &(0x7f0000000280), &(0x7f0000000140)=0x60) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f00000001c0)=""/174, &(0x7f0000000080)=0xae) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000680)={@broadcast, @dev, 0x0}, &(0x7f00000006c0)=0xc) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000780)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@multicast1=0xe0000001, 0x4e24, 0x6, 0x4e21, 0x1, 0xa, 0x80, 0x20, 0xc, r5, r6}, {0xffffffffffffffff, 0x80000001, 0x4, 0xc1, 0x3, 0x0, 0xd4, 0x2}, {0x6, 0x7, 0x5672, 0x8}, 0xdd8, 0x6e6bb8, 0x0, 0x1, 0x1}, {{@in6, 0x4d6, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3506, 0x3, 0x1, 0x4, 0x0, 0x4a, 0x80000000}}, 0xe8) 03:34:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) accept$alg(r0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(cast6)\x00'}, 0x58) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002700)="367322cdb55e553604b7808ce36025cb7ad8cc6f08acbf68cc05d6301b4cae3756873ede33bca95c40fd8be495544bd1", 0x30}], 0x1, &(0x7f0000002b00)}], 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x100, 0x101800) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x329}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) [ 330.622836] binder: 22804:22814 unknown command 0 [ 330.628819] binder: 22804:22814 ioctl c0306201 20000440 returned -22 03:34:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x8}) 03:34:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r3, &(0x7f0000000180)=0x6, 0x8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:11 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)=0xff, 0x4) r0 = socket$inet6(0xa, 0x4, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x2f, @loopback=0x7f000001, 0x4e24, 0x0, 'sed\x00', 0x2, 0x6e6, 0x44}, 0x2c) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) r2 = dup(r1) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) 03:34:11 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x6, 0x3, 0x80000001}, 0x439, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0x7f, 0x8, 0xffffffffffffff45, 0x80000000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0xfc7}}, 0x5, 0x7, 0x77, 0x6}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r2, 0x400}, &(0x7f0000000300)=0x8) 03:34:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x7f00000000000000}) 03:34:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000140)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:11 executing program 7: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x0, 0x4000000032, r0, 0x4) getsockopt(r0, 0x800000000000010d, 0xc, &(0x7f000031df55)=""/4, &(0x7f0000b91000)=0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8800, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 330.904614] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 330.931137] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 03:34:11 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000034, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000000)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x10, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x20) 03:34:11 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) 03:34:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x7f00000000000000}) 03:34:11 executing program 5: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x24, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/231) r2 = accept(r0, &(0x7f0000000000)=@pppoe, &(0x7f0000000080)=0x80) dup2(r1, r2) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) 03:34:11 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 331.414895] binder: 22804:22896 got transaction to invalid handle [ 331.421211] binder: 22804:22896 transaction failed 29201/-22, size 0-0 line 2852 [ 331.537217] binder: BINDER_SET_CONTEXT_MGR already set [ 331.542574] binder: 22804:22899 ioctl 40046207 0 returned -16 [ 331.551976] binder: 22804:22896 unknown command 0 [ 331.557356] binder: 22804:22896 ioctl c0306201 20000440 returned -22 [ 331.557402] binder: 22804:22900 got transaction to invalid handle [ 331.570312] binder: 22804:22900 transaction failed 29201/-22, size 0-0 line 2852 03:34:12 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000000240)=""/174) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xeb, "7329113f54d4f4af913bc5b8a25012abeac9763bd51ba0c60e22a73ccda36464a57b94aab140a867b96739c3d4f25776e81c9dbc110322634cfaa07b840225f3b54dc0d61924240e5ffa66a4456a136cc556cc7631b7b45b51b7fb502a33bdd9ee00b7bd2d7ffb5b8706bf723b20032f5938b1142fb14a6ed12494c59ed3ca915e41fe1c2d79c369578f5c04e060ec9bbafb8a05a11d7c7b30fe7cb7a047114a6baf634e929e8fd2aa0c5f21b0d1df83e9b9b35ec33ba16a81192bdec02a9168096fa89cf4ffd2b2a09a74a621856d9b8519b5ed23cfb6ff0bcf0b25efe1bdc27ffae1c27646e8097ef190"}, &(0x7f0000000140)=0xf3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="880000005996c5e6dcacd212bf44ac4b84b710e591578dd6bd0706af4838f9e14d09f67cced13870740e7c6f105555482de7e77d5d857d4acbc655e41e3f806710edbc0bd482d83f788fbf6306c46eaaebe9c2c1040cc96b7de305c3231879e0f8faac11a14691e8224fc11e13585fb3ad975b2b0a15d229aa1969a476cf0000000000000000"], &(0x7f0000000300)=0x90) 03:34:12 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x90100) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @mcast1={0xff, 0x1, [], 0x1}, 0xc79}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r2, 0x7fffffff, 0x30}, &(0x7f0000000280)=0xc) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000100)={0x7, 0x8, 0x8d9, 0x504}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x1}) 03:34:12 executing program 4: r0 = socket(0x11, 0x803, 0x80) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x7) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x540f013d) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_delneigh={0x38, 0x1d, 0x1, 0x0, 0x0, {}, [@NDA_PROBES={0x8, 0x4}, @NDA_DST_IPV6={0x14, 0x1, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x38}, 0x1}, 0x0) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x2000000000000}) 03:34:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) 03:34:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:12 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) fchdir(r0) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000), 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) [ 331.680749] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.690734] binder: undelivered TRANSACTION_ERROR: 29201 03:34:12 executing program 4: r0 = socket(0x800010000000008, 0x1000000003, 0x2008) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007680)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000077c0)={'bcsf0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000007800)={@multicast2, @rand_addr, 0x0}, &(0x7f0000007840)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000007880)={'team_slave_0\x00', r1}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="25af4c79dc434a0d7c5fca7102e348a5719a2b8fe76d19d54b443d5fcb0389e62d55d7fc4f2c506226f4132ab2d4", 0x2e}], 0x1, &(0x7f0000000400)}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x1) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x8000000}) [ 331.743296] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present [ 331.749693] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 331.781341] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present 03:34:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:12 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000ee, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:12 executing program 7: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1) write(r2, &(0x7f0000000100), 0x0) tee(r0, r2, 0x400ffffffff, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) 03:34:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:34:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f00000023c0), 0x218, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x7ffff000}], 0x1, &(0x7f00000000c0)=""/87, 0x57}, 0x0) 03:34:12 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)="6370757e369e6b70e5") 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x40000000}) 03:34:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:12 executing program 7: r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000080)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) 03:34:12 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syncfs(r0) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x30) accept4$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @reserved=0x1}, 0x10, 0x80000) 03:34:12 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {r2, r3+30000000}}, &(0x7f0000000140)) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = getpgid(0x0) r5 = syz_open_procfs(r4, &(0x7f00000001c0)='numa_maps\x00') ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0x7, r5, 0x1}) readv(r5, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r5, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x1000000}) 03:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x401}, &(0x7f0000000080)=0x14) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) linkat(r3, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x60, &(0x7f0000000000), 0xc) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x1b7) close(r2) close(r1) 03:34:12 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x8, 0x8, 0xe1, 0x4, 0xffffffffac15f4f7, 0x5, 0x20, 0x400000000, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x4c9, 0x1}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0xc, 0x4, 0x4, 0xffffffffffff4c25, 0x0, r1, 0x0, [0x305f, 0xa]}, 0x2c) openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x41, 0x0) 03:34:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) signalfd(r0, &(0x7f0000000100)={0xbee8}, 0x8) bind$bt_sco(r1, &(0x7f0000000000)={0x1f}, 0x8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e21, 0xfffffffffffffffe, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}, {0xa, 0x4e23, 0x240000000, @mcast1={0xff, 0x1, [], 0x1}}, 0x401, [0x10000, 0x2, 0x6, 0x1000, 0x0, 0x7, 0x4, 0x4]}, 0x5c) listen(r1, 0x0) ppoll(&(0x7f0000000080)=[{r1}, {r2}, {r1}], 0x3, &(0x7f00000000c0), &(0x7f0000000140), 0x8) 03:34:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x20000}) 03:34:13 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000110, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000100)=[@iv={0x60, 0x117, 0x2, 0x45, "d5295f198494b1840f84a3814056251af1dc4a234883738a2dc58015dabe1387faa9f47b185fc3c984d9e2317df647a5ef566062749e5413ac79552e6fe9b4533704467f4c"}, @assoc={0x18, 0x117, 0x4, 0x7f}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xe0, 0x117, 0x2, 0xc8, "6617ed281b636f3130c68f062f6659ed7340727cd13ac08e528c105f3698a686c9244b8b557bf630455f213cb446aa131f4ecbfbb45e68ac786aeecba53a0a1453032f88fd91ba48dc402e596fcc4a61438e859aa7e70ccc7d380b29168e09df7a95d832f320226ac5142067e78e8e18eb119e882afa20f68e634d5b0724a5fdd1f7bf438cb2a5270f91f5e436011046412f169bceefb3452c544a7741561f3fd39d3952e8326c2849acf6fe1c8bf1edf7b9fc4f57e6b3dca39cbada11c5295e13cd9b3e87ea1576"}, @iv={0xd0, 0x117, 0x2, 0xbc, "3abc2d1658786c5da6d054c05dca7c81bc47da8e205ed1c633382fb66a6ced3382da054cff491c6b01c2febabaa2e1b15e1f880e45988af22991082082a3322f5a4dcd8b8fe9694c8981a7c793be2673cdac6e2770524873d541da38cede4c5614b33fb47fb51033ad55b6c80a46569d12e8f579009a62c32ead57a8ecc819d3eb547825dd2da0db984f9afcca3f38624bd7379209ad1b0560c34e37937ea022f248538bba1f0b076c0525e67e3c15d62218501be012631f97e7acb6"}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7fff}], 0x270}], 0x1, 0x0) 03:34:13 executing program 1: getgid() r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f409671070") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x8000000000200b, 0x0) close(r1) 03:34:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:13 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000000c0)=""/20, &(0x7f0000000100)=0x14) sendmmsg$inet_sctp(r2, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000540)}], 0x342, 0x0) 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x4000}) 03:34:13 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x7ce, 0x1, 0x0, 0x0, [{r0, 0x0, 0x8}]}) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = memfd_create(&(0x7f0000000100)="e6bc", 0x3) ftruncate(r1, 0x40001) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendfile(r0, r1, &(0x7f0000000580), 0x7ff6) 03:34:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000840)="8fab070580a6a734789e4d1a7a20a4083faa7379190ad2ac84f482c88d83cfd74a999045dbbbf5cf052a1c31b7ef21db843fff0100000000000001c590a26556e904c5394ac3145d5402bb51fb59185071f14e1c1111465de59b005cf3b330fec22f50e6f48c377301aff238ca9659e499f9ed10a79e95af86b12ecdd6d3154d93f5544485da14cc38865f2e74ea2c88107559365bcc69b792a902d24b2baf93eaf6d703b684dbfd44000000000000000000", 0xb2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uinput\x00', 0xa4000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x20, @ipv4={[], [0xff, 0xff]}}}, 0xf7, 0x38d2, 0x7, 0x0, 0x9}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x2, 0x3}, &(0x7f0000000900)=0x8) sendto$inet6(r0, &(0x7f0000000280)="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", 0xffffffffffffff6b, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0xffffffffffffff7b) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a40)='/dev/snd/pcmC#D#c\x00', 0x4, 0x222000) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000a80)={'broute\x00'}, &(0x7f0000000b00)=0x78) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) socket$inet6(0xa, 0x2, 0x100000000) setsockopt$sock_timeval(r0, 0x1, 0xf1dc0eb150cd26b0, &(0x7f0000000a00)={r5, r6/1000+30000}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/80, 0x1c6}, 0x0) 03:34:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 03:34:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0xc008af12, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, &(0x7f0000000480)=0xfffffffffffffffc}) 03:34:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000002c0)=0xc) r4 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) r6 = fcntl$getown(r0, 0x9) r7 = getpid() r8 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000ac0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000bc0)=0xe8) r13 = getegid() sendmsg$netlink(r1, &(0x7f0000000cc0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x8600001}, 0xc, &(0x7f0000000940)=[{&(0x7f0000001440)={0x126c, 0x17, 0x202, 0x70bd28, 0x25dfdbff, "", [@generic="d6a0d2dd48b2eea1425ee32acf0c8f163a937cabf3d4f2e599a73140f85171932b356df93806bc9598f58302c4", @nested={0x18, 0x7b, [@typed={0x8, 0x3, @ipv4=@broadcast=0xffffffff}, @typed={0xc, 0x56, @u64=0x272}]}, @generic="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", @nested={0x214, 0x7c, [@typed={0x4, 0x16}, @typed={0x14, 0x4b, @ipv6=@dev={0xfe, 0x80, [], 0x21}}, @generic="45906d5c73bfa4eed6089038b4e570f2328083f65834c1f90d4c76c8ba89a9be7091c226fa5e398fce0173b920f4bb0f9fc5afcafa6757ed4ef6ad575cfe24afe958d00eb4ea9127d935b9bc2fc0fdbeab2238564412239d08858639a733d442faffa479850f19ed903ac03237a499121bc0d76cb886ed6240d5845eaae85734702639ce174e654b4b9fdecacb3088014a92f38238301324b71da44584941be0d2a97554b69e24d83dcd2f500ab3ad4b2a9d8ff54829745728", @typed={0x8, 0x1f, @uid=r2}, @generic="fd1239b7fc8479f0cffc3e83918fe21cfdd5b604f9ad54bdef3e83e708462e64728acc84e28e585f76e750b2df507a417fc8af8e99086cef", @generic="7ae388d2519ab2f8a6362f682d6d6e5b635aeef14228230260043e2d2489afd56ac74b3dff12e629c35b0fb6a33c540d860a27f7b8ec21ed8a75e0d4c9c9c4de1424bb39af2a96648bc0b28d344f300e62fbaddbfd0e2306c24eb84b527fa23b6c149d6fcf0a597176096648f680be2f02fe8a2587aea09bf7b12d4059b0e77e4a757e52a4ecc3cf77a63e8daccb63b0085651f6955c9de65d0c43b154f65ee3ac217df8cc4660126856d3e697b9f86eb1f1ccee8acb24ae4737829385148ae91bdcca1baf235e72a15e2b2ec5c1d42f4e1497b11e54c2561a39c6556faddf55cb101392de7807a797d6127dd67c4afbad220c35c9ae7e2142df7d701248"]}]}, 0x126c}, {&(0x7f0000000100)={0x14, 0x26, 0x300, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x48}]}, 0x14}, {&(0x7f0000000440)={0x36c, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0x11c, 0x93, [@generic="362151d4c8a910b7bbce187131a4c0b5d2266697bca7e94a85ebc14bf777bbe341c835cb4e2c3dd07d12916bc476e7bb2f88296a5678737e5bf8f7f6d5dd29b281f6323506a62bd9a67fff37a4fd38ce04b9f41a7aeeff1ae2d7", @typed={0x10, 0x19, @str='/dev/ptmx\x00'}, @typed={0x8, 0x4, @pid=r3}, @generic="b704ab4d5801694115664e02283ed1e62d7858b557687f28bc683bf808daae55a6271822330b6935eccfaba757b24a835ea7740c3f43d697635dfdf5d401fcc74e906497d29ad952e599c6e30c8b87c6199029b9d8f776d8faa73aa50e9d88fdd36a4f6a80dcf35fd0aa72d5f5710764fc5f35f342cab5efbaef33156cf8540d362549feb787aca7a6015fd48ad9", @typed={0x8, 0x8d, @pid=r4}, @typed={0x8, 0x40, @uid=r5}, @typed={0x8, 0x5f, @fd=r0}]}, @typed={0x8, 0x14, @u32=0x9}, @typed={0x8, 0x46, @ipv4=@rand_addr=0x3}, @typed={0xc, 0x4, @u64=0xab}, @generic="dc33054e8f07eb062a0a74e3787d9daf54e766c0879363b15d66ddcefb47348670e868eb2a98cd7fbbe5022a1d79cf7d5f92f9db08bdaeb976bd18062155141e60a99d85fccf", @nested={0x1dc, 0x41, [@typed={0x8, 0x11, @pid=r6}, @typed={0x8, 0x3c, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @generic="08ed8f27f64e6a91bf4863dd6d8049a43590f0863d48b2196ccb84843b78a930a165d6eab9686e55574b75c51f7f5aff2370694287b3656d08bdbaeae0a264f52aabc683cf869b64b3e6e8e32c8a0f7a73b33502251ec185a6", @generic="708b5b2d286ce4fdb1962839c0f7464e8316b7e425e3f8d3f93461d58b024a72e5f9dd0fe26be3967f6d8c9056a37156858e1f8f43fd704ae0c1820de2f01dbd98164716c4d23a3367daf2f60ae962253ca39648b0feb929d0e538c6f33d0963999ae9e15ccdd326e7bfa8aa1db0737b", @generic="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"]}]}, 0x36c}, {&(0x7f00000007c0)={0x16c, 0x2b, 0x300, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x33, @pid=r7}, @generic="d2f3fa3b68bb53761dc27dc6398adc83a37f224840cfd8d67d856d84eff5b5e3de09ed4d6a7bfed26595539b888acf47a78a8172d23802c80f86a701b851e96bfacc92421a843d1e6aca629a4fdbe4602671d2cadbfef1c457d3881cdbb14610aedf64632a7cc77a0e969aebf26519513c961f2b2047ed504e5fb160837b3296a379d62103", @generic="075a3a03e0a7da25fccecc39e0d51312533ac612a969", @generic="37c47b3ad93fe18376a8d0d47d81a85b772e1208469aab8ddc73b35f2c53d9c41a30f8608b428c1d9bc5942babf98fe0905c9130d3d559fdef3adc207e3eeea1e7980cebdfe1bbf68439527d5b24fbdae7908161baebaf6028a6dc8f1fb45b40f1735213839f1d745ac58c9fc3ddad29693cab3922e5245c5589710442ee761d8d617f1514f6c095252f8a3563704e45db9eea25932374aa607303827d2fdc45e0e7e6fd632beed2474baf1d56bd1ddea2d29c392ac331a0"]}, 0x16c}], 0x4, &(0x7f0000000c00)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x88, 0x20008091}, 0x80) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r14 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r14, 0x5429, &(0x7f0000000180)) 03:34:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/204) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$rds(0x15, 0x5, 0x0) close(r2) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x3, 0x0, 0xfffffffffffffd97, 0x3ff}, 0x10) 03:34:13 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x3f000000}) 03:34:14 executing program 5: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x0, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000280), &(0x7f00000001c0)) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000001c0)=0x204000, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000700)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000200)=0x674) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=@newspdinfo={0x16c, 0x24, 0x200, 0x70bd2a, 0x25dfdbff, 0x6, [@lastused={0xc, 0xf, 0x8}, @sa={0xe4, 0x6, {{@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e23, 0x100000001, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x0, r5, r6}, {@in=@rand_addr=0xff, 0x4d3, 0x32}, @in=@rand_addr=0x3, {0x1, 0x2, 0x7ff, 0x1ff, 0x10000, 0x8000, 0x8, 0x8000}, {0x4, 0x8, 0x8001, 0x6}, {0x5, 0x9, 0xf4c}, 0x70bd26, 0x0, 0xa, 0x7, 0xa6, 0x20}}, @mark={0xc, 0x15, {0x35075d, 0xffffffffffffffff}}, @lifetime_val={0x24, 0x9, {0x100, 0x5, 0x1000}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x2}}, @offload={0xc, 0x1c}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48000}, 0x20040000) restart_syscall() bind$bt_hci(r3, &(0x7f0000000240)={0x1f, r5, 0x74443fbcb2511eaa}, 0xc) setitimer(0x1, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000000)) 03:34:14 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001cd, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:14 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) 03:34:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="500785791a4c474281936a61bb57237f", 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="2b4be52bf7f55f9a8955ccc7a1736ceb165bd2613ab455ed72d9ada0eb0da319a05c3b1a9df4c920bde89a4f0ec759c7f99fb1650c8d3427abc42d23ec", 0x3d, 0x40}], 0xc5, &(0x7f0000000240)=ANY=[@ANYBLOB="6a71666d743d7666736f6c642c6a71666d743d7666736f6c642c6572726f72733d721aca8d926d6f756e742c00"]) 03:34:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x8}) 03:34:14 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'ip6_vti0\x00', r1}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200fbffffffffffffff0806000186dd06100000000000000000fe8000000000000000000000000000bb000000000000ff020000000000000000000000000001ca8c76edc828b86240141765fc48a344116f46c0e58b37a031de2f236771519f96cdb020afdab30b71c4de"], &(0x7f0000000040)) 03:34:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x4000000000000000}) [ 334.017309] 9pnet: Insufficient options for proto=fd [ 334.030418] REISERFS warning (device loop7): super-6506 reiserfs_getopt: bad value "rÊ’mount" for option "errors" [ 334.030418] [ 334.050610] 9pnet: Insufficient options for proto=fd 03:34:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa}, 0x1c) lookup_dcookie(0xef, &(0x7f0000000040)=""/7, 0x7) close(r0) 03:34:14 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101801, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xa4, 0x24, &(0x7f0000000180)="ff75fa45a6d938d3203053b3fd93bd55feac668fdc9011d9dd3b578da1e0f31eb009f0e46dbaf87b1e26f1bfa1f7d281e7e4f62910757ee18a07a2ea132ded00f1919129d717a85852e707cdae33cae14021cf013e582bd86b7dced71e73dc2f00ec6c3b5492a27bddd66427677bc3ea078771e93eebf7da789f2ee338a901859a130f250a7565437c27cd676a9aa6f3e217e69351fb9d5565bcf79fd23289abcc119f83", &(0x7f0000000240)=""/36, 0x5}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x10200) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x1000000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x4339cc3c2a3302be) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x267, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3}], 0x1}], 0x49249249249265b, 0x0) 03:34:14 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x101000) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @reserved=0x1}, 0x10) r3 = socket(0xa, 0x1, 0x0) poll(&(0x7f00000001c0)=[{r3, 0x4000}, {r2, 0x20}, {r2, 0x8400}, {r1, 0x400}, {r3, 0x8202}, {r0, 0x8000}, {r2, 0x100}], 0x7, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0)={0xfffffffffffffe01, 0x1ff, 0x5, 0x8, 0x8, 0x1, 0xffffffffffff57c7, 0x1b8}, &(0x7f0000000300)={0x5c, 0x80000000, 0x8, 0x7, 0x5, 0x0, 0x4, 0xffffffffffffffff}, &(0x7f0000000340)={0x80000000, 0x2, 0x401, 0x5, 0x0, 0x1, 0x7fff, 0x5}, &(0x7f00000003c0)={r4, r5+30000000}, &(0x7f0000000440)={&(0x7f0000000400), 0x8}) getpeername$inet(r2, &(0x7f0000000200), &(0x7f0000000240)=0x10) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000100)=0xffffffd, 0x2) 03:34:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_PIE_OFF(r0, 0x7006) 03:34:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x7f000000}) 03:34:14 executing program 4: bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000001080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000001040)}, 0x18) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2082, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) 03:34:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @pic={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x9, 0xd9}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'irlan0\x00', {0x2, 0x4e24, @rand_addr=0xfff}}) 03:34:14 executing program 5: r0 = socket(0x10, 0x804, 0x4) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000002300)={'bond0\x00', @ifru_map}) 03:34:15 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000163, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0xfdfdffff}) 03:34:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:15 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000004c000)=0x23, 0x4) setsockopt$sock_int(r1, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x82, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f000086eff0)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x9}}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1f, 0xffffffff}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'vmnet1cgroup'}, {0x20, "85"}, {0x20, 'user-}[(['}, {0x20}], 0xa, "ccb09ac55fbe8d6004730fc1051cf7903f504a33bb817b15905e788c"}, 0x41) 03:34:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000200)={0xa6, 0x6, 0x0, [{0x10001, 0x6ac4, 0x6, 0x7ff, 0x10000, 0x2, 0x100000000}, {0x80000000, 0x7ff, 0x0, 0x1ff, 0x3, 0x6, 0x5}, {0x6, 0x6, 0x9, 0xff, 0x0, 0x2, 0x1ff}, {0x7fe000000, 0x6, 0x7fff, 0x8000, 0x5, 0xff, 0x255badb}, {0x7, 0x10000000, 0x3, 0x8, 0x2, 0x7ff, 0x3}, {0xfffffffffffffff9, 0x88f0, 0x7fffffff, 0x888, 0x1, 0x401, 0x7}]}) socket$inet(0x2, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 03:34:15 executing program 5: msgsnd(0x0, &(0x7f0000000200)={0x3, "7d1667cea0e2bc54a27fb8af35d1080e5a7396ca592d7b8b6b0ba96a09026693ff4bd225"}, 0x2c, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='w'], 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x111000, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) msgrcv(0x0, &(0x7f0000000040)={0x0, ""/35}, 0x2b, 0x0, 0x3800) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000240)) 03:34:15 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) accept$alg(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/100, 0x64}, {&(0x7f0000000480)=""/61, 0x14}, {&(0x7f0000001000)=""/4096, 0x12d8}], 0x3) ioctl$TIOCCBRK(r1, 0x5428) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000280)) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000180)=""/186, 0xba}], 0x3) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000003c0)={0x1, 0x6}) 03:34:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000100)={0xffffffffffffc75e, 0x20000000, 0x1400, 0x2, 0x10001, 0x9, 0xfffffffffffffc01, 0x0, 0xe4de, 0x101}, 0x10) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = dup(r0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl(r1, 0x100000000, &(0x7f00000000c0)="4aa1632eab6a18754a4d8716edc6dd1f439627d4256f0fb93c6987e2a489730a8b2c274799") fchdir(r0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="95a9bea5661c53d2e04cf9eabdc523094295f1509aa8125e9f06ce33c1fb3204d6ae93155e77cca2ac83369145c0d7666714d98089c0d5b454cf3403d6cb09f65166c3a76965eeb75b2bf6d1cd7d4e8882b50f8600f12cf8a17b6dfc9a7b5808efa281e90a689248ad4ff7fa38009dc29e3399585dff0e906d1d8229045263736f4726d935e2dd122de960680d5eb7d483029461d19c205998d60ee4b7a203b011220ac629923bcef7219a004ad84128b31a65e6ea3eee7a61ddf5646e9dbcbba63a173cc35bf2228f"], 0x34000) sendto$inet6(r1, &(0x7f0000000280)="d3", 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1'}, 0x3cb5) r3 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) fcntl$getflags(r3, 0x40b) write$binfmt_misc(r3, &(0x7f0000000000)={'syz0'}, 0x4) 03:34:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x3f00}) 03:34:15 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) clone(0x100, &(0x7f0000000040)="dff73be4fe0a8df4a37f43e1557913470df1aba4da1071f9ea44f19824009fffbc00b09f98273c23060bb40038368e6683c1662fb09037bdb390449062bf348b6d2074c9105451f0018541c5d70d63045e33fcd639767b83ac2835526146b8df01cf08ed", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6687ebfe9e9665464b8aa25c2da5f13faf1a42d18eb97f56431df719680ca7e571d675a10c57035c812089cc7c420282573f89ee2100f7b0c5be22bf0679bb7cae1948fef9639bb06432b249b13cacab3bcdc237d75ad256b6c585d8d5e8c91b1b65c9f7a0c6da900457a5cd8e6c628dd6feb9b69b3ef017c0920348c779d679c2f7ed541d2ff6d838cc324a72fbdd0db686ec443dac2886ad8f8344d546fdc69ce1a4c47cdc14b39ba34ef22528e5f09c1e1d7a96eb3aa8611b15bc2575851a3140fb289c1c70907e6dd6da738ccf9814a85f5a9d567c150df38eeb3c2a19b8") setsockopt(r0, 0x107, 0x5, &(0x7f0000000280), 0x31) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 03:34:15 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x80, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = getpgid(0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x1) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') chmod(&(0x7f0000000180)='./control/file0\x00', 0x0) ptrace$peek(0x3, r1, &(0x7f0000000080)) rmdir(&(0x7f0000000040)='./control\x00') link(&(0x7f0000000240)='./control/file0\x00', &(0x7f0000000140)='./control/file0\x00') close(r0) 03:34:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:15 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x7, 0x7, 0x1, 0x0, 0x80000001, 0x8400, 0x5, 0xfffffffffffffffe, 0x3f, 0xffffffff, 0x30, 0x1, 0x8, 0x8, 0x7, 0xc3, 0x588, 0x20, 0xe0, 0x6, 0x1, 0x9, 0x6, 0x45, 0x4, 0x80000000, 0x9, 0x10001, 0x1ff, 0x2, 0x8, 0x8, 0x87b, 0x3f, 0x3d, 0x0, 0xc9, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0xa00, 0x4, 0x8, 0x5, 0x3, 0x1, 0x80000001}, r1, 0xc, r2, 0x1) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r3, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="005c8f2380345f8f762070") r1 = inotify_init1(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) clone(0x0, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)) ptrace$getregs(0xe, r3, 0x0, &(0x7f0000000340)=""/38) 03:34:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0xfffffdfd}) 03:34:15 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:16 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000a4, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x800000000000000}) 03:34:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f0000dd5ff0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r2}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x1}) unshare(0x10000000) fcntl$lock(r4, 0x7, &(0x7f0000010000)={0x0, 0x0, 0x0, 0x0, r1}) tkill(r1, 0x1000000000016) dup3(r3, r4, 0x0) 03:34:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'pids', 0x20}, {0x2d, 'rdma', 0x20}, {0x2f, 'rdma', 0x20}, {0x2b, 'memory', 0x20}, {0x2f, 'cpu', 0x20}, {0x2d, 'rdma', 0x20}, {0x2b, 'cpu', 0x20}]}, 0x2a) umount2(&(0x7f0000000080)='./file0\x00', 0x8) 03:34:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='status\x00') rt_sigaction(0x16, &(0x7f0000000140)={0x8, {}, 0x0, 0x2}, 0x0, 0x8, &(0x7f0000000040)) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209, 0xa5}], 0x126, 0x0) 03:34:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:16 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000000000000038180000010000000000000c0000200002"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x100000000000000}) 03:34:16 executing program 7: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004480)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000044c0)={@loopback={0x0, 0x1}, r1}, 0x616) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0xc0fe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast=0xffffffff, @in=@local={0xac, 0x14, 0x14, 0xaa}}]}, 0x38}, 0x1}, 0x0) 03:34:16 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000040)=@pppol2tpv3in6, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/180, 0xb4}}], 0x1, 0x0, &(0x7f0000000440)={0x0, 0x989680}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r1, r0, 0x400, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000c061f001cfffd946fa2830020200a005100010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000280)='O', 0x1}], 0x1, 0x0) dup3(r3, r0, 0x80000) 03:34:16 executing program 5: sysfs$1(0x1, &(0x7f0000000100)='\x00') futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x10000, 0x24043) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{}, {}]}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 03:34:16 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:16 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0xffffffff00000000}) 03:34:16 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003c4000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) 03:34:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000236, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) get_robust_list(r3, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000100), 0x17) r4 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400) write$P9_RMKNOD(r4, &(0x7f00000003c0)={0x14, 0x13, 0x1, {0x2, 0x3, 0x4}}, 0x14) 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x3f00000000000000}) 03:34:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:17 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xd, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000f81a13405fe81d617b6200000000000147000003000000000000000000000007000000f33e0000000000000000000000000000000000000000f4154a141a4d"]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x800000000000004) ioctl$void(r0, 0x5451) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab97e050000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xa4f, 0x200001) 03:34:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/191) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80000, 0x0) listen(r2, 0xf5) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000729000/0x1000)=nil, 0x1000, 0x0, 0x8000000000004011, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x2}) 03:34:17 executing program 7: syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB='+']) r0 = socket$inet(0x2, 0x4, 0xfffffffffffffff8) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000000080)="82f7437c210a10ed8a66a89c5bd6fe6e24c9719096d819e2c7f1191bc1edcaa6d3d9c602602cf8d9ccd1977e8f744e3c6f4b99e315cc321f572ea485905f30329cdd00671f81a0bfbb6918e8bc8a4bb54225d2f4a0aed6c90e45857b385ea4eaabf60b325e30d9cb372da252b9799a895a33735b7f52dde69e1d1d71157bddb3faefb1fc8b8a441af9e0e2401ac9bbf76d2e1bc791ee5e8abdc6426d571738a620953e6563359fb61270a1f51c8e1319258b6c3f179ff70839543f82bb90152b99377c883ad0759bb8dfa93522dd414d4f6369ff49a3342f445d0598610a2733d0f1a7351b7b8e91ed73c5a1", 0xec}], 0x3, 0x0, 0x0, 0x4}, 0x20000000) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0)=0x65, 0x4) [ 337.018786] XFS (loop7): unknown mount option [+]. [ 337.075359] XFS (loop7): unknown mount option [+]. 03:34:17 executing program 4: rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, &(0x7f0000004c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000000000000000000009500000000000000df0e493c5d573a5bfcdf41d5874b12c61526fb1b5e826400ad9b0ae2543b95f716de35"], &(0x7f0000004bc0)="730004ad34fba8547ce82c", 0xe6, 0x17, &(0x7f0000000300)=""/251, 0x0, 0x1}, 0x48) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000004a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/183, 0xb7}, {&(0x7f00000005c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f00000016c0)=""/232, 0xe8, 0x1000}, 0x7}, {{&(0x7f00000017c0)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001840)=""/125, 0x7d}], 0x1, &(0x7f00000018c0)=""/3, 0x3, 0x10001}, 0x3}, {{&(0x7f0000001900)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001980)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x101}, 0x4}, {{&(0x7f0000001a40)=@pppol2tp, 0x80, &(0x7f0000004000)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/201, 0xc9}, {&(0x7f0000002bc0)=""/146, 0x92}, {&(0x7f0000002c80)=""/142, 0x8e}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/146, 0x92}, {&(0x7f0000003e00)=""/235, 0xeb}, {&(0x7f0000003f00)=""/9, 0x9}, {&(0x7f0000003f40)=""/47, 0x2f}, {&(0x7f0000003f80)=""/78, 0x4e}], 0xa, 0x0, 0x0, 0x2}, 0x4}, {{&(0x7f00000040c0)=@ipx, 0x80, &(0x7f0000004580)=[{&(0x7f0000004140)=""/132, 0x84}, {&(0x7f0000004200)=""/90, 0x5a}, {&(0x7f0000004280)=""/207, 0xcf}, {&(0x7f0000004380)=""/207, 0xcf}, {&(0x7f0000004480)=""/251, 0xfb}], 0x5, &(0x7f0000004600)=""/7, 0x7, 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000004640)=""/193, 0xc1}, {&(0x7f0000004740)=""/78, 0x4e}, {&(0x7f00000047c0)=""/172, 0xac}], 0x3, &(0x7f00000048c0)=""/56, 0x38, 0x743}, 0x8}], 0x6, 0x40, &(0x7f0000004ac0)={r1, r2+30000000}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000004b00)={0x0, 0x5, 0x7fffffff, 0xe761, 0x128, 0x6}, &(0x7f0000004b40)=0x14) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x28ff, 0x8800) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f00000000c0)) r5 = openat(r4, &(0x7f0000004d00)='./file0\x00', 0x100, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000004b80)={r3, 0xa2, 0x6, [0x7ff, 0x7, 0x7ffd, 0xffff, 0x6, 0xfffffffffffffffa]}, 0x14) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000004c80)={0x80, @tick=0x7, 0x4, {0x4, 0x3}, 0xb385, 0x0, 0x7}) 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x7f00}) 03:34:17 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:17 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getscheduler(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000000)=ANY=[@ANYBLOB="020004f0000000000000000000000000000000000193de9f9785d9"]) 03:34:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r3 = getpid() fcntl$setown(r2, 0x8, r3) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x0, 0x71, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x31b, 0x3f, "8de40217330f417ca78f1b01843ccc50afc199d380d31fdcc1c76dd9ce6c5b7e682f6b76607a0926fd86581a3116de13997246a648cf8e23fe375921885feba9fc6c33875bc04a8e4078d526456a9aeaff561164e8fd4bd6e33e02003b573151ab121cf0a40630527a954e26ab50f9e9aaaee34e803d333b1ae58404d7a7ba4f829b54231cb961c738f675e440c9cf5347de557a7541375818486abbe8135e26f492ec26c6a88707dbc515a2cb736e6f35bdd38b3ba2207d9ca2411e2209745a7b8b54dd621145c78c1e284f381058a381be1dab5e2e387be23c89200f9baccb3c935689aa43eb19e236c93af2a2d70c7f0512b46324aa2bb9ed3f371cbf94ba", 0xfd, 0x0, 0x5, 0x5a, 0x20, 0x7, 0x37c}, r2}}, 0x128) mremap(&(0x7f0000b8b000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000afb000/0x3000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 03:34:18 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001bb, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:18 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)=0x1800, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r1, 0x0, "e2943a", "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"}}, 0x110) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'rose0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01d0d51294eb9c2c0b549db50e3fb77776707718fe987b7181670a41522e539e9eb9b4aa5ca65ec15f598c6a5d8051006a8a6485a97c4f6fc503684f76c2c16bb1ea7ddfc92639f5697714f837b261520ac9fabab165c2e16f04cbbc0776c87cd6cc4941d5ebca68"]) 03:34:18 executing program 7: r0 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) mount$9p_xen(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x10d4000, &(0x7f0000000640)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r0}, 0x2c}, {@msize={'msize', 0x3d, 0xac73}, 0x2c}, {@dfltuid={'dfltuid', 0x3d, r1}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@aname={'aname', 0x3d, '{%cgroup^em1'}, 0x2c}, {@aname={'aname', 0x3d}, 0x2c}, {@dfltuid={'dfltuid', 0x3d, r2}, 0x2c}, {@nodevmap='nodevmap', 0x2c}, {@version_u='version=9p2000.u', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r3}, 0x2c}]}}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r4 = open(&(0x7f0000000000)='./file0/file0\x00', 0x3bffa, 0x0) ftruncate(r4, 0x7ff) write$vnet(r4, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffe82, &(0x7f0000000200)=""/8}}, 0x68) ftruncate(r4, 0x7) 03:34:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 03:34:18 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000600)={0x3, 0x5, 0x8, 0x401, 0x9, 0x10000, 0xfffffffffffffffb, 0xa4, 0x1, 0x4, 0x4, 0xc840}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/28, 0x46983ea3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000700)={0x10, 0x30, 0xfa00, {&(0x7f0000000640), 0x2, {0xa, 0x4e21, 0xa251, @local={0xfe, 0x80, [], 0xaa}, 0x1}, r3}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000240)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r4 = dup3(r1, r2, 0x80000) ioctl$EVIOCGABS0(r4, 0x80184540, &(0x7f0000000300)=""/145) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) get_robust_list(r5, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)}, &(0x7f0000000480)=0x18) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 03:34:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "d4b36b", 0x3, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}}}}, &(0x7f0000000080)) 03:34:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xec41}, [@generic={0x2, 0x401, 0x65, 0xfffffffffffffff7}, @jmp={0x5, 0x6, 0x2, 0xb, 0x9, 0x2, 0xd}, @map={0x18, 0xf, 0x1, 0x0, 0xffffffffffffff9c}, @call={0x85, 0x0, 0x0, 0x41}, @generic={0x5, 0x80000000, 0x8, 0x4}, @ldst={0x3, 0x3, 0x3, 0x0, 0xf, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x4, 0xffffffffffffffff, 0x8}, @generic={0x1f, 0x1, 0x6}, @exit={0x95}], {0x95}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x68, &(0x7f0000000100)=""/104, 0x41100, 0x1, [], 0x0, 0x9}, 0x48) mmap(&(0x7f0000e47000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000240)="468b0e1a783605cf1621c41d8d33b1e248f19b1506c019d1944e2b8283cfc96fcd709722732a6020aadc946b6467ffdeeacf78851082f68e89a4c7d9b2e3d0c41eee073145472cc5ca01e8b94634ba0ba44945f4a9510daa6f07c77da011b793ad784bad77cbea467bf1ce1abd16ad055dd0751d1934e95572192c744d487e24e4ff74aec01e0a192ff47973ef96252a", 0x90}, {&(0x7f0000000300)="bcbba491da153faaccdf415750a9494f9b484e103aad78544b97121d3efa9878e3ed8854c3ff897ce795f45cd1cf03513699d382727ae686e143cac2a1a442a6b69eb5e7a80c24f6e28fb30570d2dae489d5632f2db3a6f3be642ed9f02d04fd994dd7e1f416", 0x66}, {&(0x7f0000000380)="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", 0xfb}], 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) mlock(&(0x7f0000ae9000/0x1000)=nil, 0x1000) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1000, 0x80000) fadvise64(r1, 0x0, 0x6c1b, 0x4) 03:34:18 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000480)=0xdbc, 0x4) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="10c439066ee8e32ddcd30bbc0645b181dd6e5af1664ffcfe3e80c667a4e775054fc97d14500b13f7afb0563e07b5434b95768b4c26cc51a304620cb7c32ea87aaff8de3574b9b7622c626b15ec6a0302c4f96f627aed9cf77bc39bd1918301276e806fb9d75a36586ed6bc63e1466aa71b429213fb12a2bf50fb123a83dd451461b6b73ed3addda964a88dc21797e78939ca5eec541f7cb96a734fe22e"], 0xffc9) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x141003) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xb4b6, 0x900) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x3, r2}) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xfffffffffffffe42, 0x0, 0x0, 0xfffffffffffffe9f) 03:34:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x4000}) 03:34:18 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x2) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000000004, 0x11, r1, 0x0) ftruncate(r1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') name_to_handle_at(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=ANY=[], &(0x7f0000002280), 0x1000) 03:34:18 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 337.911443] FAT-fs (loop7): Directory bread(block 128) failed [ 337.928189] FAT-fs (loop7): Directory bread(block 129) failed [ 337.950843] FAT-fs (loop7): Directory bread(block 130) failed [ 337.970106] FAT-fs (loop7): Directory bread(block 131) failed [ 337.976587] FAT-fs (loop7): Directory bread(block 132) failed [ 337.982789] FAT-fs (loop7): Directory bread(block 133) failed [ 337.990225] FAT-fs (loop7): Directory bread(block 134) failed [ 337.996400] FAT-fs (loop7): Directory bread(block 135) failed [ 338.002805] FAT-fs (loop7): Directory bread(block 136) failed [ 338.008904] FAT-fs (loop7): Directory bread(block 137) failed 03:34:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x3, 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0xe05b}, &(0x7f0000000140)=0xfffffffffffffed2) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x80000001, 0x30}, 0xc) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x10001, 0x200, 0x7, 0xffffffffffff450b, 0x5, 0x2, 0x6, 0x4, 0x160, 0x38, 0x36a, 0x2, 0x3, 0x20, 0x1, 0x1, 0x5c, 0x7fffffff}, [{0x7, 0x80, 0x1, 0x2, 0x4, 0x800, 0x2, 0xffffffff00000000}, {0x70000001, 0x192, 0x8001, 0x2, 0x5, 0xa3, 0xfd}], "9793e0f5bbc5acab4839e82d585bd0b82c6dfaaaceab8315eaefa040de2c9323efe5208e44b10f997cc5308dd088e080b966773463fe2887b0727375ee636abc1012f1ab31268e8b2f189ee263887d3434669d71ba3bc6cf42c4e447aae0a70f1d0a626ffcbe2e0d2592a76824e58b21fa9013fdc89f0e792ae6105342329a0799e421ce5d2053e5c4905e2301b52cee7d442a272b6c85e36a5c4bb6895c002e345b28e5e1f1e5859b8983f06e511ade231f3d83bbbee3e760a7644c0ab026a3f717a9a249c667906317c7d66ef1ab5d915cce9ce80ed47e69f90b6fa52be519a5a0c17da9", [[], [], [], [], []]}, 0x65d) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r1, 0x5}, 0x8) [ 338.041890] attempt to access beyond end of device [ 338.046932] loop7: rw=2049, want=310, limit=128 [ 338.051644] Buffer I/O error on dev loop7, logical block 309, lost async page write [ 338.060111] attempt to access beyond end of device [ 338.065295] loop7: rw=2049, want=311, limit=128 [ 338.070081] Buffer I/O error on dev loop7, logical block 310, lost async page write [ 338.078405] attempt to access beyond end of device [ 338.083431] loop7: rw=2049, want=312, limit=128 03:34:18 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 338.088144] Buffer I/O error on dev loop7, logical block 311, lost async page write [ 338.096241] attempt to access beyond end of device [ 338.101341] loop7: rw=2049, want=313, limit=128 [ 338.106087] Buffer I/O error on dev loop7, logical block 312, lost async page write [ 338.126174] attempt to access beyond end of device [ 338.131246] loop7: rw=2049, want=326, limit=128 [ 338.135977] Buffer I/O error on dev loop7, logical block 325, lost async page write [ 338.155975] attempt to access beyond end of device [ 338.161317] loop7: rw=0, want=310, limit=128 [ 338.174494] attempt to access beyond end of device [ 338.179526] loop7: rw=0, want=313, limit=128 [ 338.184630] attempt to access beyond end of device [ 338.189661] loop7: rw=0, want=326, limit=128 03:34:18 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x8001) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000580)="d8", 0x1}], 0x1) 03:34:18 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge0\x00\x00\x00\x00\b\x00', {0x2, 0x0, @rand_addr}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000002c0)=""/4096, 0x7f}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @loopback=0x7f000001}}) 03:34:19 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001fb, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:19 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0xe, 0x4, 0xf728}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000200)=""/161) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, &(0x7f00000001c0)="ed", &(0x7f0000000080)=""/164}, 0x18) 03:34:19 executing program 5: setrlimit(0x8000000000006, &(0x7f00000a3ff0)) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r2 = socket$inet6(0xa, 0x1, 0x0) setreuid(r1, r1) r3 = memfd_create(&(0x7f0000000000)=':nodevvmnet0$GPLnodev}\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0x100000000, 0x1}, {0x7, 0x80}, 0x753, 0x4, 0x1}) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setreuid(r1, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000000140)) 03:34:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 03:34:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d34") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:19 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 03:34:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") socket(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x2, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x1000005, &(0x7f0000000380)="917c139d744adcdbc441b1643a129b43374093ff0f00000000000013a3710be18fa678ebf49230326bac84152a17c08132913a8c644c6fba21ae57bfb836820101000000000000c2040040a16a09000000184d1c31c3d9d7000000007b78884821536a3ff88bfc90675974a4e514e4a1b2c46eecb260e55303096adc7f3b69fa9a6bd330b2dff43a5a6fead891f7c379059afa1d6d19d92c00040000000000005e4780943b634011fa4200e734dc59649ccf41c8d0f491a159facc0938cd1b3280143baf62fdd2444fc2932ff448cec0430faa8b71c2b8d08adf2d0f4714fbf9c857aa9151ee2710a36972e82b12", 0xee) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e25}, 0xfffffffffffffe72) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x2b2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x20}}}, &(0x7f00000002c0)=0x84) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) sendto(r5, &(0x7f0000000040)="e1ea21e1013e22f2a241cba804a91c2f3be76ad3f6", 0x15, 0x800, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x3, 0x4, 0x0, {0xa, 0x4e20, 0xfffffffffffffff9, @loopback={0x0, 0x1}, 0xffffffffffffb39a}}}, 0x80) 03:34:19 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)) 03:34:19 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x80000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x6, [0x2, 0x7fffffff, 0x80000000, 0x3f, 0x9, 0x8]}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f00000002c0), 0x1000) connect$netlink(r0, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbff, 0x1804300}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_ENABLE_CAP(r3, 0x4020ae46, &(0x7f00000000c0)={0xfd, 0x0, [0x20000, 0xffff8001, 0x0, 0x5]}) close(r3) 03:34:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 03:34:19 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d34") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 338.801164] binder: 23425:23434 got transaction with invalid offsets ptr [ 338.835254] binder: 23425:23434 transaction failed 29201/-14, size 24-8 line 2995 03:34:19 executing program 5: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x800) bind(r0, &(0x7f0000000100)=@ax25={0x3, {"75180ccbaa8e22"}, 0x5}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002e001901000000000000000001000000089a8176d4000800"], 0x1c}, 0x1}, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) 03:34:19 executing program 1: r0 = socket$inet6(0xa, 0x887fff, 0x6) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x600000, 0x2, &(0x7f0000a00000/0x600000)=nil) mmap$binder(&(0x7f0000c54000/0x3000)=nil, 0x3000, 0x300000c, 0x88010, r0, 0x34) ioctl(r0, 0x8913, &(0x7f0000000180)="821fd9208b6dde07000000ec8d06003d6d345f8f762070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000580)=0x13fffc, 0x0) fcntl$notify(r1, 0x402, 0x1) poll(&(0x7f0000000140), 0x0, 0x1) accept4$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x14, 0x80800) accept4$inet(r1, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80800) [ 338.886154] binder: BINDER_SET_CONTEXT_MGR already set [ 338.908011] binder_alloc: 23425: binder_alloc_buf, no vma [ 338.913709] binder: 23425:23445 transaction failed 29189/-3, size 24-8 line 2967 [ 338.928889] binder: 23425:23444 ioctl 40046207 0 returned -16 [ 338.962671] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.977834] binder: undelivered TRANSACTION_ERROR: 29189 03:34:19 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1040000000032, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x8d14, 0x7, 0x3d2}, {{0x77359400}, 0x5cfa7390, 0x0, 0xfffffffffffffff9}, {{}, 0x8, 0x3, 0x3}, {{0x0, 0x7530}, 0x8, 0x0, 0xdb}, {{r1, r2/1000+30000}, 0xff, 0x6, 0x4}, {{0x77359400}, 0x40, 0x101, 0x7fff}, {{r3, r4/1000+10000}, 0x0, 0x7, 0x401}, {{0x0, 0x7530}, 0x41, 0xb77}, {{}, 0x5, 0x5, 0x4}, {{}, 0x1f, 0x6, 0xfffffffffffffffc}], 0xf0) 03:34:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x0, 0xf1}}) 03:34:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 339.047201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 339.055718] openvswitch: netlink: Flow key attr not present in new flow. [ 339.119223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 339.127771] openvswitch: netlink: Flow key attr not present in new flow. 03:34:20 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000003b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:20 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3d0200", @ANYRESHEX=r0, @ANYBLOB="2c303830303030303030302017303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x101000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000002c0)=""/56) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) stat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) 03:34:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d34") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x88081) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x240, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 03:34:20 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x107400, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) bind$packet(r2, &(0x7f0000000200)={0x11, 0x19, r3, 0x1, 0xfffffffffffff518, 0x6, @random="202bd218a319"}, 0x14) ioctl$TIOCSSOFTCAR(r1, 0x5408, &(0x7f0000000140)) r4 = memfd_create(&(0x7f0000000000)='em1/\x00', 0x2) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) 03:34:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) 03:34:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 03:34:20 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x1, 0xe142, 0x2, 0x8001, 0x0, 0x9, 0x800, 0x9, 0x7, 0x2, 0x400, 0x6, 0x5, 0x4, 0x80000001, 0x1, 0x400, 0x6d9, 0x1, 0x18, 0xff, 0x101, 0x9, 0x400, 0x100000000, 0x9, 0x1e04, 0x3, 0x1, 0x3, 0x0, 0x5, 0xd952, 0x7, 0x1, 0x3ff, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000200), 0x4}, 0x22200, 0x2, 0x7, 0x0, 0x2, 0x8, 0x6c}, r2, 0xd, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x6, 0x100, 0x3, 0x0, 0x0, [{r0, 0x0, 0x7f}, {r1, 0x0, 0x5}, {r0, 0x0, 0x4}]}) kcmp(r3, r4, 0x1, r0, r1) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 03:34:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) getpgid(r2) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000000), 0x47) 03:34:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x2}) 03:34:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000445000/0x1000)=nil) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00005e8000/0x3000)=nil, 0x3000, 0x8) 03:34:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f76") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:20 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2201, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x578, 0x0, 0x350, 0x218, 0x490, 0x490, 0x490, 0x4, &(0x7f0000000080), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0xffffffff, 0xffffffff, @empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0xfffffffffffffffd, 0x0, 0x4, 0x4, 0x76, 0x40, 'gre0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x0, 0x18}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dri_device_t:s0\x00'}}}, {{@arp={@broadcast=0xffffffff, @rand_addr, 0xff000000, 0x0, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}, @mac=@random="4846a33bb4e0", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0xc24f, 0x1000, 0x20, 0x7ff, 0x800, 0x7, 'irlan0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x10d}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xff, 0x3d7e}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, @multicast2=0xe0000002, @multicast1=0xe0000001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5c8) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x46}}) 03:34:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x8}) 03:34:20 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f76") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x5, &(0x7f00000001c0)=[{0xff, 0x6, 0xb55, 0x10000}, {0x9, 0x0, 0xffff, 0x7ff}, {0x7, 0x0, 0x0, 0x94ec}, {0x8, 0x7, 0x3}, {0x1, 0x400, 0x7a99, 0x10000}]}, 0x10) close(r0) 03:34:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000140)=""/112, 0x18000, 0x1800, 0x6}, 0x18) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f00000035c0)=@in={0x2}, 0x80, &(0x7f0000005700), 0x0, &(0x7f0000005740)}}], 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) 03:34:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) setuid(0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getaddr={0x18, 0x16, 0x101, 0x0, 0x0, {0xa}}, 0x18}, 0x1}, 0x0) setresuid(0x0, 0x0, 0x0) 03:34:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000012e, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 03:34:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f76") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 340.686180] QAT: Invalid ioctl [ 340.697187] QAT: Invalid ioctl 03:34:21 executing program 0: clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000080)={r0, r1+30000000}) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x44b7ecf1322947d7, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x410000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x50, &(0x7f0000000280)}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000007ed176f2af5e6c2f04a6955eb2", @ANYRES16, @ANYBLOB="21000000000000e241aebcd49ca29000000010"], 0x24}, 0x1}, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r5, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000000c0)) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x48}], 0x1000000000000050) 03:34:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}) 03:34:21 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 03:34:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@local={0xfe, 0x80, [], 0xaa}}, &(0x7f0000000340)=0x20) r2 = dup2(r0, r0) sendfile(r2, r0, &(0x7f00000000c0), 0x40) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) r3 = getpid() mq_notify(r2, &(0x7f0000000100)={0x0, 0x12, 0x0, @tid=r3}) read(r0, &(0x7f0000000180)=""/196, 0xc4) socketpair(0x2, 0x802, 0x2987, &(0x7f0000000440)) 03:34:21 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"0600000045b400000ec67b00", 0x2001}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) 03:34:21 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000013000)) socket$inet6(0xa, 0x4001000000000002, 0x0) ioctl(r2, 0xfff, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$EVIOCGMTSLOTS(r2, 0x80084503, &(0x7f00000001c0)=""/101) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000240)=""/163) close(r0) 03:34:21 executing program 4: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x800) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000100)=0x3) perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fdatasync(r0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) syz_open_pts(r2, 0xffeffffffffffffd) getsockopt$inet6_int(r1, 0x3a, 0x1, &(0x7f0000000400), &(0x7f0000000000)=0x4) 00:05:40 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 00:05:40 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0xff50}], 0x333) fcntl$setstatus(r0, 0x4, 0x20000000800) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/110, 0x6e}], 0x1) ioctl$int_in(r0, 0x80000000005005, &(0x7f0000003ff8)=0x8001) close(r0) 00:05:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup2(r0, r0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000000000000ff070000000000000500000000000000000100000000000003000000000000001f3d15bbd6392e07bad02ed9ef8ce47ba2439663efde1aca3cb5a2bbfc5baee989510e5b554d8364308c0a9a54e8f242b3b0f789822caa4de6c867c47ece3be61e1dcd6147a0636aa26cd6f9bf089600135bf8cb0de9f1a01f63a803a75ed4964b6623632986802301751d76093592fc6a8ec6b6c9cf28a37dd002e82654500a216ec262ea74b8dc14fccbbfce97c9a7a1fa5aa9a1dad2933e07a8"]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x80000000000004) 00:05:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 00:05:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 341.054375] FS-Cache: Duplicate cookie detected [ 341.059243] FS-Cache: O-cookie c=00000000bcc244bd [p=0000000061c57b40 fl=222 nc=0 na=1] [ 341.067417] FS-Cache: O-cookie d=00000000bc259ce8 n=000000005cc9c21b [ 341.073930] FS-Cache: O-key=[24] '73797374656d2e706f7369785f61636c5f64656661756c74' [ 341.081933] FS-Cache: N-cookie c=00000000d515c76b [p=0000000061c57b40 fl=2 nc=0 na=1] [ 341.089931] FS-Cache: N-cookie d=00000000bc259ce8 n=000000001b778182 [ 341.096447] FS-Cache: N-key=[24] '73797374656d2e706f7369785f61636c5f64656661756c74' 00:05:41 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000a9, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:41 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:41 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffff9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400040, 0x0) 00:05:41 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) read(r0, &(0x7f00000000c0)=""/50, 0x5f6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3, 0x3, 0x0, 0x0, 0x22c7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="29584eb50811804f203f93b068faad757ff3229f569437f583be7feb2b568aab2762a3bf4f527482b77ee934ae3153c9eb55e6b7a46adac7cbd38571f40c53d013678155bf08a040039f4b0385db5a1c6cdab71efdc5e42b230655d7bee7cad3c0acfe7deee1edc7823b9b04916aeb35fc7f3a2b722deea646bbfbe09478e0903983860353e35d599bee33e0570fc830e7b08f16ab0d30c56965", 0x9a}, {&(0x7f00000001c0)="4c54e44971dfcccaba1949137354213251cb997d105e8cbac02d5afbc9de2d6764e03e8133ef7ec21175adfeeeab8a6cde651fbca9bde44322962912c1a88ad6415c831fbb908f2625b34993eac8b7f2168430c714db89330a65dc486dc20973998ccddfa97eb193974fd70d7621a8a4903e03436ac2978976964867d5a12b9728845b043b94b19bb7070988381b2d4e632cc407791719c7ae3b", 0x9a}, {&(0x7f0000000280)="bdc92c5c6eaa78d06ff6aa300e39fc0caa4e4a5ad63def9eb77741b01c6eb7d58fcad1e7716855d2429c11f40635ed012c45f3d7b71cf2963051d7aed703f318bbe61df15115c5f5f75c156bed878d2a6becd96b8fc7f6fd05c7ca3890ce80b7b32efdc849a80cb83b", 0x69}, {&(0x7f0000000300)="03051a79e582601c15fcac80b16e77f69e8cc990d5abd5744c04696eb2d9f451a9944d1ff16fa6ee0b79ffcaae92c4ad48cae82648ede74cf16a208ef49f0bf0faa36cd1a7a13f740867da088272db849da089d8dcb03f93cb99fe59233ed0d4db9a5dc51907f949d2cd44d11f11005bb7c5c94c558b614838cdcb98d3d9dab91b8433e97d189b09f8c8524e3102cb92c9733e38b4f6c1dd33145ec793592906e7a12bbf75b554bc858c7e20c4a68b483ac1b9838bdf4f46d07372d818f6062d49c19cbed815237a39e21fded5c6653c67893e2b70bfac301f2e41c719f9d41026004c86aa96a41acc22a5dfb14bde", 0xef}, {&(0x7f0000000400)="d6c84e58fdf15dcd78e2970a65871c8940310f8457fe3283a3a4c47892f27decc8e9459decd838dafcc67f415d6df4e5807991121046d906b6f09f6b311420c3d782f366ad6a868283598f043118c7012b2842c23721c8a301325175a52e229b08d3323b0ccad9c15d4c237a613ea63fb6ea9c4c31d272e497327c6a81cb8a9508f4588ef83461adb20cc6050e90c36d2c73c73b0016ce279dec874291bd1edcb1ad45aa26a3724a554c720ac192f1b77cbdd2237cadb4f4b8", 0xb9}], 0x5, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) r2 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000000bc0)=0xe8) getresgid(&(0x7f0000000c00)=0x0, &(0x7f0000000c40), &(0x7f0000000c80)) r5 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000002040)=[0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) r8 = getpgrp(0x0) r9 = geteuid() fstat(r0, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002600)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000002700)=0xe8) r13 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002740)=0x0) getresuid(&(0x7f0000002780)=0x0, &(0x7f00000027c0), &(0x7f0000002800)) r16 = getgid() r17 = userfaultfd(0x80800) sendmmsg$unix(r1, &(0x7f00000029c0)=[{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)="42db8e8fa3e00a04937a40baa3bd3e231a6a7700f46e92c6648cedfa944bf3484131129bbf6262b54374c20189769b754fa7f50e22f3d2d5f8a7484b330b67804f81a73738f7f8079f4e28e6a4ecf9760715a4e78322b5ea72e2dfb0eff6ef5db092351ccce973924cf92e382b1c7ce697c7477f0e4a64ad5e5286d615497a5795cbfc5158cfacdff5f035e9124c0dea8cd3943227b681b9b49b29dfd66ddefd92f158dd320846bf4721a51e764e06e5565ed2741fe2", 0xb6}, {&(0x7f0000000680)="c834e63fdaac7dbb58c9bbd98e5552bbb4234d0838472be1274d81b7c1488354e7ea9babd9245ecee4e6462f9140559982620f794df3126765ac43bef76e12977c268191959ae3786fca9e0fe5a9d7ee525bf5c0c0a2a84a8f1d94a913d6c9881c2f833983f50c6f25e5fc417432a746bc2669200ef31386a26b37fa3cea22d76a9830478d07975f1cdbf030d0db765db448ee19bfa6e47f7655aef1f8d5b6d01cc2c862c8c3cacf3d6c520b70c14e26aa1e13ffde31be095684a25c1c186f1e28f114fa5bd0fb2e3275db0156d698bdab4faf544ef8e184bd1ce8859189df3037f322b88db6", 0xe6}, {&(0x7f0000000780)="7d7f5081fa11fc1fa58dd404dc9ded1f5b00e53d5dac9a59d08efbacd567ee71176a7e954ba2d58e9332bb68c3343b81ec7191bc05b69714f3d5ebf1096b98a186566f1cbf957abe61b1c45d092648d830228c85e57bdca1ca54d4f411806f7ce83036d8c7ecc7a08fb0882e44a260e887008e0b3b597012ef692a1c5ead2aebdb4c3b705a", 0x85}], 0x3, &(0x7f0000000880)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1]}], 0x20, 0x800}, {&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000940)="4947ba5f4f0f29608659e76561a274fad0ba69a2700a3b3cc528365c265a04e452d102da494a5d7d6b2006e7e53ab56d467a0387b3b29719a74ad27a003a682061be7eceb292ebf39d71f6464ad62784fdf429ab9164f39ae360b57830066553207d8a917e7e60dac6a4872d199b2166d4a4b0fb6e01853dc3faccfa9eb1901cb227d03ee752fec626c8524e86385eea8ce0af4f34e11908d1b23d8cd04ce8c2e98cb1968d0528bffd3e175625751a8897d2414e2f5a8a919acae723dac98900bf8e2c3b24c370734b", 0xc9}, {&(0x7f0000000a40)="65c6dabba456baf0d28fd575f062dac15db8b243d91d61", 0x17}], 0x2, &(0x7f0000000cc0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r1, r1, r0, r0, r0, r1]}], 0x58, 0x4008051}, {&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000dc0)="cc01a9c8b0b51d8f421d84adfd837fccc8f1070f9f15b530f57526b3f7b1dba468dd979fe0363b692a20c0632a3c4061ac08b84bcb1e72452b48b839425d0f7c053163001b5511da22fcf82276c9d1065a9d08ef145fd81cf230bf2a04a043b605423035c9300a300c0216a37b49b0625e5aebb37396f6e3ad11f7d2d091ce7488f6ac4129bcd04daac93f9363ea4b222f28ba9034a820c1f2fe3b6143b08cc2410a4e85ee2d6cb097cd649b099622793fbe", 0xb2}, {&(0x7f0000000e80)="b8b38a67de22d7637dbf54197f6d84c7b8eefddc65f3", 0x16}, {&(0x7f0000000ec0)="ae09a289136962fc279c0d6465b96a6dada0784c783fd3f47a55a040df02f9a7998bddc01319bd44a780ac7ddeabefa5b7c699", 0x33}], 0x4, &(0x7f0000002100)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r1]}], 0x70, 0x8000}, {&(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002200)="b4fd4ba09068efd5b644a742a740c60d58c1", 0x12}, {&(0x7f0000002240)="258cc3c18906d4f0bc6849d149feaf9ed88c3df73513476d3d9ddc065601809c5037c2e4f170c610377b8625", 0x2c}, {&(0x7f0000002280)="2aec8b4cf23839bcf9e38551c3d53520ac135c6afc36b47d916e32d356c7e33a9b5091e986bd8fd1dcc619b73397e26c5a4bc8c17a26bd9fd1337ae5954980d8746e85b086b987d416e442b1a8716877f5ba00b614275ddabd376f4e79940361423cd0e2b103b9446448656663b1aaa6b352ca408c096bb619a71d434c06ab4c38e6", 0x82}, {&(0x7f0000002340)="676cc636af9a2177e755f951503cc959bb40fc6deccaf898ea3a3515cdd21db3eff1f4f50fd4fc1686650139b5b423dddfad11e9aa56b15f92dd14576ed89b473562d18dca8d47b93f11b71cdbe33f719f2a3fe06567a5d17c076f04c9a577f0aa3607b54e8c2affc5594d4f30129ff3e24ed258103f90b367ae0db19f888c64979a01e4a0853a3c1cc9dc3fc55b21557dfc6845be0f86009b7337937a98c6cf00f21a618e88410264253b6b314791baa5560b399b1b5a7ca17eb9129415dbfd6a9be7b09e0c94bd96220bc2e2c3f373ddf2691fa27a804c47caeba73517d0b96a9f8f3cfc959aec0ecead", 0xeb}, {&(0x7f0000002440)="c70388d1aee01e38ec7b1470063bbe0f164ff1dd9a6dd1708314cbe4c552238c0cdba94108ada538a842bb03c5150d6b0e8071d967bedb18db6faf5f840227d99aa291bf89a4023d9d061c737ebebbc54df3b2774adc940bb7be4eb710355627a920e0067d0e548b985bb28203515b29edebe50a095c454872000d5a9bb263e83016d4cd44bf8bb18f4b5a4d320d57aa5d3c2f7589dba45c714eedfbf72bdd3e47a839052fef68786213704ed0c728e056c3112b33400f8866504d0ef33525bf9f258a918af9ef524bf08bd3ae24ea", 0xcf}, {&(0x7f0000002540)="d4cfb2db6a53a7d8b9", 0x9}], 0x6, &(0x7f0000002840)=[@rights={0x28, 0x1, 0x1, [r1, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x38, 0x1, 0x1, [r0, r1, r1, r1, r1, r1, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r17, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x150}], 0x4, 0x78e5d55d8ad6739a) 00:05:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 00:05:41 executing program 5: clock_gettime(0x4, &(0x7f0000000040)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000080)={r0, r1+30000000}) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x44b7ecf1322947d7, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x410000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0x50, &(0x7f0000000280)}, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000007ed176f2af5e6c2f04a6955eb2", @ANYRES16, @ANYBLOB="21000000000000e241aebcd49ca29000000010"], 0x24}, 0x1}, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r5, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f00000000c0)) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x48}], 0x1000000000000050) 00:05:41 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:41 executing program 4: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f7620") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:41 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x100000, 0x110000}) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 00:05:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:42 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x20004000000, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0x7, @empty, 0xffffffffffffffff}], 0x2c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000200)={0x0, 0xbb6}, 0x8) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af03, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="02040400", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x800}}}, 0x84) 00:05:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:05:42 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x20800, 0x0) fstatfs(r0, &(0x7f0000000100)=""/201) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r1, 0x0, 0x4, 0x81}) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000033c0), 0x0, &(0x7f00000034c0)={[{@acl='acl', 0x2c}]}) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000200)) [ 342.101841] 9pnet: Insufficient options for proto=fd 00:05:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x5}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) 00:05:42 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 342.220511] gfs2: not a GFS2 filesystem [ 342.271699] gfs2: not a GFS2 filesystem [ 342.301160] 9pnet: Insufficient options for proto=fd 00:05:42 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001a8, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 00:05:42 executing program 4: set_thread_area(&(0x7f0000000080)={0x2, 0x20001000, 0x0, 0x44, 0x8c7, 0x4, 0x4, 0x9, 0x6, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002c0019010000000000000000430000000c010000080001005588d800"], 0x20}, 0x1}, 0x0) 00:05:43 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) gettid() ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000000)={0x0, 0x2000000001, 0x2, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x4, 0x4}, 0x2c) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x0, 0x0) 00:05:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffff80000000) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x4, 0x5, 0x298, 0x8a9, 0x8001, 0x55, 0x0, 0x693d, 0x6, 0x685f, 0x7fffffff, 0x800}) r3 = syz_open_pts(r0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x80000, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000180)=""/208) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x9) 00:05:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)={'nat\x00', 0x0, 0x0, 0x54, [], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=""/84}, &(0x7f00000003c0)=0x78) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x800, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f00000000c0)) 00:05:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004600002c0000000000019078ac1414aa800000004414000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000178ea7b177b8a86fc24a0c84af546637796400900600dac766306bb8b40e4427e444dd0de03a5684b0ea44d54ca6b9807598c3eb7172766c9e9b9adeaedfd9cb088c136560e870fa740d181bec98ce4aee663aff7e1d2e5e71374a9abac508463164e16bda7afc6bb5262f6896"], &(0x7f00000002c0)={0x1, 0x1}) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) 00:05:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000540)={0xffffffffffffffff}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x14) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000100)=""/224) r3 = geteuid() r4 = getegid() fchown(r2, r3, r4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000500)={@loopback={0x0, 0x1}, 0x10, r1}) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 00:05:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8000, 0x800) getdents(r2, &(0x7f0000000280)=""/5, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x200000, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x200300, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2c00, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000480)={r6, r7, 0x4, 0x916, &(0x7f0000000380)="abf8278be46c52248242f27d1e6ab849ef97a350192629639d1b2f61ffe17e4d34d59f13eded91f82723737a91b3ba04eec34529d3ffc070951f5bcace39d23058e2b2bdd4a411e1fbece9e3a13d0fdf39ab3ad05460353e21648b987d9949d4e9669e009b3f804b312187bae8ff38d2194e850dfe374bac3b26d0c514fdac6c508bb6949934de2914fe2d6ffc2f12a48daaf1f10ee6dd186bebc8a0d1cf747d4a5f8786e70864a22af0b104981a90243c418a02e4f0aa31aedff6f53f1ceccb3d0ef463daf9df373dd1f85c1867c50cc0750d4d6bf061062ccadd18ad13", 0x2, 0x4bd9, 0x5, 0xffffffffffffffdd, 0x9, 0x3d, 0x2, "ff4b623e9ef0f836e967b817501db5fe5b4e"}) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000080)) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10, 0x80000) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000200)={0x1}, 0x8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) setsockopt$inet6_tcp_TLS_RX(r9, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0xc0010004, 0x0, 0x40000003]}) 00:05:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:43 executing program 7: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0xcc6}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001040)=ANY=[@ANYBLOB="000041f39176513eac9d13edf884b700000000000000a38f6ac376905d94c2d991459910fe80b267ba1b7e3db85b87f100667543d6ba965baa2b485150729e56d4621690f705d26b98b05c18773b926806e1e02fe10c5e148024f1d7c8d797e9f178a8b23ad97240f9288fece1258818106ede666a745014274cb80e476b6175abe8f1c154e2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="0f1f1a66b8901800000f23c00f21f86635030001000f23f8b880088ed0660f3835570066b9f20b000066b80000000066ba008000000f3066b9710b00000f32660ffb3dbaf80c66b89427648b66efbafc0cb80000efb802008ed80ffa07", 0x5d}], 0x1, 0x1, &(0x7f00000000c0)=[@dstype0={0x6}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="0fc79c05000f017500650f0174990f01cf660fdcc5660f2f1b660f380ac4dfc70f001136dde0", 0x26}], 0x1, 0x20, &(0x7f0000000240), 0x0) 00:05:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0), 0xfffffdef) write$P9_RREADDIR(r0, &(0x7f0000000100)={0x87, 0x29, 0x2, {0x0, [{{0x2, 0x3, 0x3}, 0x3, 0xb6f9, 0x7, './file0'}, {{0xa, 0x4, 0x8}, 0xffffffff, 0x7, 0x7, './file0'}, {{0x20, 0x1, 0x3}, 0x80, 0xffff, 0x7, './file0'}, {{0x14, 0x809, 0x7}, 0x80000001, 0x10001, 0x7, './file0'}]}}, 0x87) 00:05:43 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000207, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:43 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000100)={0x76, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x9}}, {{0xa}}}, 0x108) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names="04707000"}) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 00:05:43 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x8f, "97f40df7e9eb5d5b104cc60ae9c9f9492c2e52e7da32363c8eae186233b9be59d15706ce8811ae25934c617c65d1861b3bb1717b56a8756965c090686a63790dcc8dc4681f6466851695929bba865a7143adb35a32e3b1ac6e0724d4ad2f0102bd3eb5d11819508e5b5680fee8cde887bdbfe1648a4a9f17f677dbf416dcd935e9523d60e5886d5c089754969857db"}, &(0x7f0000000100)=0xb3) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r3, 0xae8f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3ff, @empty, 0x6d}, @in6={0xa, 0x4e23, 0xa9, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}}, 0x118) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0x400000000000007, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="c744240000000000c74424028a580318c7442406000000000f011c248fa838a26254083e460fc76a3166baf80cb8aaee9c8eef66bafc0cb0a0ee3e4c0fc71966b8aa008ee8410fc79ec11f000066baf80cb85f33658def66bafc0cec0f01dfaa", 0x60}], 0x1, 0x0, &(0x7f0000000140), 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xee7, 0x1cdfe09d}) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200229bd70100008000400ff077ffa2e92b66295126d197947ff9bb36f9b9c3f826f0249f565eef09ebc00000800041906000000009b171ff32954a3ba8ae7af863a0281c9547725f1c66f5c5b1f46b918f363c02e0a1c5b32619cce938512db90726b666dbfb1b2880a4174fb6d42356a01593b853e847f397bcf11220248c15d1ee8aaef42f827ba88fd07c62059e9270b9999e7903efcc753a5b641765d557642079982890cfe3d2f2e543b1d71098ebc343fbb4b67"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x80) 00:05:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100, &(0x7f00000000c0)="3f79ecdcd4221a44168cce5bab5c4a8e6f427f8fda0f1ab73f985cf00791b23f882fd9d741566e8b98e3635497b5d6a0dd08401230b83ca0b154cdbf30307bd4d56ab4da465e9da6eeffa0dfb729f484f8688f1bc617c9f0cba93d2e9957c440ed267c6f0acd8ad0fcde065b6528f102dbbfb6c83a8ed7c38d5c096b45002fba04ed08add92883bc9be22da454ecc9ae67db9d15dc8b64df54ed6a9f310f44c7aec8df6deb9a8f9fc93c13e8ce0fcb7329651b150a6b869dd667055dc24ac4214891") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200)) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000f825f8f89e00000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010c7"], 0x90) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x2) 00:05:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fsetxattr(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="736563757269747970657d25766d6e657430000000000000000000000034972d2d1c5d730e1a70d0983875f018c09e7e3c9568b057a739c3b0ea4f6da4cbd95e07630f681af661937a1aab76f909"], &(0x7f0000000080)='y#\x00W', 0x4, 0x0) close(r2) close(r1) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) [ 343.622777] QAT: Invalid ioctl [ 343.637304] QAT: Invalid ioctl 00:05:43 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x357}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x20000000040002}, 0xfffffffffffffcd0) r2 = socket(0xa, 0x4, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001840)={r1, 0x80}, 0x8) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000001800)=&(0x7f00000017c0)) fcntl$setlease(r4, 0x400, 0x0) socket$inet6(0xa, 0x200000000008, 0x3fd) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_writev(r5, &(0x7f0000000240)=[{&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000400)=""/216, 0xd8}], 0x3, &(0x7f0000000280)=[{&(0x7f0000001b40)=""/140, 0x8c}, {&(0x7f00000005c0)=""/4096, 0x11ed}, {&(0x7f00000015c0)=""/104, 0x68}], 0x3, 0x0) r6 = getpgid(0xffffffffffffffff) getpriority(0x3, r6) ioctl(r2, 0x200000000000400, &(0x7f0000001a40)="ff7fe1311f16fc576f10704c86d634149fc5b2b1d4bb3d9a04c806380f1f768918626db0fbed031463699c77537e20a1") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001680)) getsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r8) connect$nfc_llcp(r2, &(0x7f0000001740)={0x27, 0x1, 0x0, 0x5, 0x88, 0x31, "2e6d279d062006508e73cfe8b490aae2c05b6d1d39abcb7833db9566ef78755ed8c34f5907709c3f205c343bc3ba21adce04b65e64e77d3e772cac471adc3b", 0x10000000039}, 0x6) r9 = socket(0x10, 0x2, 0x0) signalfd4(r0, &(0x7f0000001640)={0x1f}, 0x8, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000016c0)={0xfffffffffffffff7, 0x100, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x3, 0x3, r1}, &(0x7f0000001700)=0x20) ptrace$pokeuser(0x6, r5, 0x34d1, 0x3) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)='sysfs\x00', 0x110001, &(0x7f0000001940)="42e935580ee227017544ba337c5ccde77603aa4714d23c896d385b44f983581a50d2cca00e331b8f6a76dd56039045a8596fb4e5b4e8b26f69822e5b4961c114e5d40b598932e7c02be8e3868c9c42ad6ef432a819b8ec41d27f") setgroups(0x0, &(0x7f0000000000)) setresuid(r7, r10, r10) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) setgid(r8) 00:05:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 00:05:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) dup2(r0, r1) fallocate(r1, 0x1, 0x100, 0x1) 00:05:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 00:05:43 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0xd1, 0x8) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(rfc7539(ctr-camellia-aesni,md5-generic))\x00'}, 0x58) close(r1) 00:05:44 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000201, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:44 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x288001) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:05:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xa5, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x27aa, 0x20880) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000080)={0x7ff, 0x6}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000040), 0x113, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) close(r1) 00:05:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:05:44 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCEXCL(r2, 0x540c) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) r6 = accept$packet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x7) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x0, 0x400, 0x9, 0x7f, 0x3, 0xc4e3, 0x5, 0x8, 0x1, 0xffff, 0x6, 0x7}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000240)={r7, 0x3, 0x0, 0x3, 0x5, 0x7, 0x1}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read(r6, &(0x7f0000000280)=""/184, 0xb8) write$sndseq(r9, &(0x7f0000011fd2), 0xffffffee) write$cgroup_subtree(r9, &(0x7f0000000400)=ANY=[@ANYBLOB="a3d91c0000000000000ec60384606520"], 0x5) read(r8, &(0x7f0000000180)=""/126, 0x2000036b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x1fd, 0x3, 0xd000, 0x1000, &(0x7f0000013000/0x1000)=nil}) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f00000003c0)) dup2(r3, r5) close(r0) [ 344.479829] 9pnet: Insufficient options for proto=fd [ 344.488751] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 00:05:44 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8001, 0x41) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000000000000a004e23ff0000000000000000000000000000000000000001000080000000000000000000000000000000000000000000000000000000000000000000c738790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2306000000fe8000000000000000000000000000aa06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e220200000000000000000000000000ffffe00000020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x10000, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000000c0)=""/246) pwritev(r3, &(0x7f0000f65000)=[{&(0x7f0000000000)="80fd0100006e", 0x6}], 0x1, 0x0) 00:05:44 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) getpeername$packet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'bcsh0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="0c002bbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff01000008000100", @ANYRES32=r4, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004001f00000008000100", @ANYRES32=r5, @ANYBLOB="7c00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000083800010024000100616374697665706f72740000000000000000000000000000000000000000000008ff03000300000008000400", @ANYRES32=r7], 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001400)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}}, 0xb8}, 0x1}, 0x0) 00:05:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:05:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x0, {{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x100}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x6e07}}, {{0xa, 0x4e22, 0x401, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, {{0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x101}}]}, 0x210) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000080)="e997c1b7032b30580cc64d0a545bafaaabacf04c41cfd62c2f330f174f176ff7c0155b2860e27def2765cafd6eb0ea58f246d16bcbcbea51667021deda76da9b8cd05aaf7212e48d5a7e54b6c3c4503d4ca0cf48fd470d6425237d7eee9fef32e9f3f76d49fc8cf713961cc9f4e61f0a6421583157146949b3f9a409dff40abcfd5aaae32d703af67f771ace8a67453facc536d2d027b0b403fa7bd68096432915a27de45bbfe5436dec29e628c0e60a52a824f5b18ff62ca3ce956755409c9af3e42d71d09bd75f9da96bd41bab9f7be1833aabf9e5492f572b687ebfaff8bd36ed0b895d042b5d6402781f3a4b29b00c", 0xf1) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x80000000, 0x9, 0x6, 0x4}) [ 344.521856] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. [ 344.697577] 9pnet: Insufficient options for proto=fd 00:05:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 00:05:44 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), 0xfffffffffffffebf) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl(r0, 0x1, &(0x7f00000000c0)="1688fac91c3113d3c9499e09bb24dea2c72beb4bcce1a28b98502cb65304e3c7286eeefa9e82d0cf2e88ecfa063064d2ae91b54ce852a4e127ca9072a289882125b30a9b8566e630a2b36369d5d1e441a214a97876410997674bd92aa89b1a94577039e7bdcbb0ee01d5fccf4b5f749a98a36b27126ef7ad10bc7005428e8fd1cddba3a0f17fb7773de4c4bbea6a96eb16f086c483f69fbd711432bddcf845b3f0ffdcedfa7d8ca4bb531a3392ebc9f1c3c979de") setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) clock_getres(0x3, &(0x7f0000000500)) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x44) 00:05:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) syz_emit_ethernet(0x1e5, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x3, 0x6, "fa9151", 0x14a, 0x87, 0x80000000, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, {[@fragment={0x29, 0x0, 0x3b20000000000000, 0x3, 0x0, 0x7fffffff, 0x65}, @dstopts={0x3a, 0x0, [], [@enc_lim={0x4, 0x1, 0xfff}]}, @routing={0x2c, 0x10, 0x2, 0x0, 0x0, [@loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xa}}, @mcast2={0xff, 0x2, [], 0x1}]}, @fragment={0xef, 0x0, 0x400, 0x30, 0x0, 0x2, 0x68}, @hopopts={0x1d, 0x3, [], [@enc_lim={0x4, 0x1, 0x6}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x1a}}, @pad1={0x0, 0x1}]}], @icmpv6=@ni={0x8f, 0x0, 0x0, 0x7, 0x6, 0x1, "acd15ca7a5acb3eabb0b29c746099e0bc51bbb152bf1161211f9c92bcbced297de50f01b426da310c9f553a2fafb03c75100431a28030cefc89cba699d41c52091fe7027c55874e3fa62c8126fb80127cae2284a6835845f251eefa3f7f8a320101fac7550130b830f01"}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0x2ef]}) 00:05:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f000082ef0a)=""/246) dup3(r0, r1, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000040)="b5a58ed99aed5079c0c2fdf86709c3aa6f4476459bf645") [ 344.863151] QAT: Invalid ioctl [ 344.866994] sctp: [Deprecated]: syz-executor7 (pid 23877) Use of int in maxseg socket option. [ 344.866994] Use struct sctp_assoc_value instead [ 344.889074] QAT: Invalid ioctl [ 344.893555] sctp: [Deprecated]: syz-executor7 (pid 23877) Use of int in maxseg socket option. [ 344.893555] Use struct sctp_assoc_value instead 00:05:45 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000151, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) 00:05:45 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000210010a020002260af8", 0x16}], 0x140, &(0x7f0000000180)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x7fd, 0x0) write$P9_RREAD(r2, &(0x7f0000000040)={0x19, 0x75, 0x2, {0xe, "a3ed0c103253beb3f71a2181ec0a"}}, 0x19) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xfffffffffffffe33}], 0x1) readv(r3, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000240)=ANY=[]) r4 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="c74424000f000000c744240200000000c7442406000000000f011c243e3e3e660f388217b8010000000f01d966ba6100b085eeb985090000b86c690000ba000000000f3066baf80cb86b362a83ef66bafc0cec260f350f060f080f08", 0x5c}], 0x1, 0x0, &(0x7f0000000040), 0x0) 00:05:45 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000100)={0x6, {{0xa, 0x4e24, 0x0, @empty, 0x7fff}}, {{0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0x7fff}}}, 0x108) r1 = gettid() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x1) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffa}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x60000, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x800b, 0x4, 0x7, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000300)={r3, 0xf03, 0x1000, "331574942812d4afc2c5290f56c56089519228e428f1a9fbbd35090551f577b91ddc0d0aa35a27e682de8ff231dfddcc3b81c7027e48a152abe7a604124e8c57051bc48e11210d341e1829629b04a0db971764ee90bc55fc8e4501e86275585fb57a3ead1f187188c02c66f49e32f4c63cdb2988516c4ba8de51ddece0e1edfbd6108ec8967b29725f1787593af16bcccef1c027b7ee075cd849b8d895f43ba384940edceb40a094198fe35410decde81231f77d3e1e4f4f86381ac7b00ffba5e30a7e7f876c999a80ff4c1475113400a03b466173774886c5aff2b96f09c0fe870961d5f2ad3852f2759d0d5e94489f9db5599e99e68a24f94a571f49ecc4d6ae14c6a78dd02514c040877b8bb78f80a010026f12b4b68f02dcf8bbfa1fb72352cb7114fa83146006ef151d53f0eda94e50f7391f98947397c1b6cd1b0a192a6c5cc5d8ed30a2eccea19bc0a21b1af8a7d74d8e529913f11cb54353d3bdf3e50e6ab69f7932a5c46a818b663467414a23b7877408784d4ea2621df57644f4e5b62d1957d950b26c1768e4781d56fe3d6016e9d21930bb24b9bbf21260caa7a54a13cf55306c6fdabb4cdcbc2bb079ae01e34d00295332d207038dcf94c092ae487e514ff51db30322b7f31c12e4ba20e8dfbf571c617c856b86365ab8197136c72a716499a1c7a4439714822264fd9ec07ba1fd955ffc37c3a4fcf3b921f26ffb958d92bd46b95fd5eb2882d94dbb24dcb75b29a9c0064a362d1a7e1b35e692de44b8c9c897a46ab270ed8de16003545d164f269f3cb919f8d2bf1a9425b2fe62fc6a264d06ad1a0fcca10ca6dbc8a72c91f3f64090dcb1b66d340d9c31bc4e0d1b6b75a02649d5b745c5991834464477374fde91222e62f97386dc5bab205f2631c22ace2f5ed02d32554fd453112f667d2f979f7ba35d53bd6cf6c7aaad045824a4fbf42665da3de21d8d1701a53ebdaf015f128669fe20bc353e3284102f2940906c199bdbf3fe6df72c018887cf8a7206a2bb41c59255ffa3d4fdffe0913176a756d245d3dc9cf2df704c23e63f2788512852a0fda0edfc6faa775d088132cf588d3d36f416c6a6f90cd1870a04a0f213cbb00d954098efb3d992d5f29f2e5b36e396435a874a8342908f503687cd25a52c41101d691aa42a5c97a15e8b5dbfec41d3d78eac8e96df1daeddc44fb3bb9a040dd72aa66566ebebf96ab177bcf23881c765a49df23ee8c0c42bb15d5e0f8a7e2a57b54cb2b001bfb9cf589910e94c4962a58334520f91dacd49556fb01e6ae1c263a3f692e4007059ed7e7e8c2b561dc8426771feee7d0f12e1a255dba5b3f694071881908035f14b0be6b4a9744e7b92b74ad37fab236aa574ce34e6b1b499e566ea7e551c636d71f66d3efca4c9e0f36dadddfa3978c12afc3c40a71b48c0868d6a8c978f05403bf3c93053f6dd8294c17bb9edc9b99b5af10c096480cf81e07008fb1954758dcd63365282f14209e96411b8f78c0cc5bd4df6db7feeb2534412c8c60d80defaaa0186fdb13f893ecd09b561002f274cc194401f06ffbc81a0cf0e51518b89993ea04cc0e5404d584ac73700928ee9c538b58f8e2e181ce241cdb0dbca0dbc04f5abbd90a217d95315cec168bc9f3de320bc23b6af5f0feb861cbe7b06112926ff7f47b76b1b45b7e7707eb2c233f1a64b2295ab0f7f2296ada5f31ede33fc1941cf30b071471b541cddddd0c7551a4d26914f5eebf853e09dc11a444705887f15c6d4f565a8db83c8433717b0aa6c37c18226d4bc2c3c695b97cb019a67303f6cd80095654c163de7eb68a76fb51d1d41e03287e05556f008febf9b752308eb1f6b203549f5ece81dbc630769108177155432c0c58994fe4baff666b89b600ac59ddf27512644849918ee65b8edf12b1d9041ad860367dbdfcbaaa35d70d99fa9c91573ef5e8cfab894e6d5f84a975a2048a5edb2f80cfe66e007cfef45677b9a2b55bee965fbb3269c54fa5f0c9d4c542b328bb547431a643338dc0de6fcd5847f4781759ca0e3c314c94d11e62ed703c4cefb73061f538f1117e319ae1fea11fd99529d4801e9fb5242e55cc7f3c045f22c8ebffbc545abd2299080c815d31c7e2b5f473742b68521f66c53d9df55c86b358414d08a9ee66b3ac9fbb01bc6254001b200124905abc308caf0187742210f2ddb3a1842ab45ff6df827a4a768282895dbfb2fd0e9a753d13f47998dad60ee9f07e7fe8ed14f073ab924cc7ef26e83922e658e69886cf88cf19f305c8a0602de86439ae7cb1203a586f4be2d2c1fe7c194a46385fc9d5a84976c170b3390b5d37af3bee06d6ac090ff296ed764bd569b27dff502f6637798ff5bfc0b25c99106d4ac9bb840c6ef62627b3d06484eda28e4ca3f8610231995390b3433be69c59e4e80311d41b3d2661ad99a806d785084b43bc15e691ac711a972027357a0a18bc86aba2a43b6ac2e0cf219cbe86b0283cea5994fda146d3ae630beab35904035dbbf5723c8d2449cfd7e7dffdfd41022a19f5a87710f641efcfdec5766e9bbeb103222a9f6aa9ee2e7fdec32b81151bf9e23556c5f8822d0344e42f1cdfa788680d34e0f6eaac2971944cf18a37334e404afc2815615861eea639003407594574f5ba1f8c51f37f92759d070c863069744d259d7ceb77aab143c11db6f0d516ea2e9fa548efa5df6faba74032b9fb1eb1d6fdfa7fd2acec8f910abe5edb9f01760b173f34da55add519abc06d0c3a8b957faf1205158b4541b4f6d6924d98f88afe7321b65dbcdbcf3a9e4d4dd887f388ead0d2cd5d699a75e6470f5a1b51d3e37ad48bfc54a219601efda7e0e83f55f742d666d51df0ba68d18906620139e8e3916e8b3b30e4c4947cd2d9330b5d7c1aa775f3ae6dc9b92ade4ac5502a3a30b95a8bead1783264837aa1cd76863820d8958330ca449ec843faef0ac77ab3ee07f9ae89b1831b2b350fc63150e4c25d8ceb81505958fa02febf22424e10ea9b9f9d5396167c24f4f1a9b7f57298176465861a4a6a3892702ea3fd11291d790e2d15d15041cce2473d2b8e37a0497a32d69d1bae3fbe1cc9d3d93482263193eb8d21bfdb1f6046487ecc58f9d54714c1f7def1afb5f46314c7d81f7470cd2a12ffcf2e2bc3355fd3b49d97d9a880b9a232d126d2eb9c05f65290ab41865925cf92b4d8d7a96966699d1cd3cd5b2f850451d2caf3e233ce221f2fdfaff479f89c90c10e6a63340426e22cb1fd8b4fb3c8259789cf9d7cca385547c00ecfcf6542642dc94a0eeb843b66b486419cd53285747560628c7de95cfba3a1e74770aef4b78438376c25077f976597ad8177a2e0c8518e9c3af856c98e30ea899a54f81009725dbddd7d92b9dad68f104f9f1314b58535dab70cce04c4d07f2e540e46c87797a0a9a51426b0f00d6718924e2972f0527ca748d3f9e58c115aab1747c1d2301b8e0288ebe78e5e10daceb9698fe4368959d54c77d234feb7dc9cf13e8c89b7a1ee7e01b974059a54df2bfaa1269e50156c9b073ad0011775bb5eca8da793c0d2867fb2916b75a209e0ddfb7167e79690bf48aa4645f60a97cb32a8fa210b1f69120fce47d1934bbae03cbc2ef59e1c4fe3138fee8955ebe903443b14384eb698b9402d4a489962e3851dd747c2ee2d34f086a778860a21bdc3d06cfeb915f048f16cc73e97596bf95b82cf76c6a6379deb0d456cef7041106bf9becb50968236ecb9dd1fbceb46610a2d94e7d112c77f660c2ba736cd98159bdf4a79cfcc7f31701742e971518f669de5b49c3f2f6dfac86afe43dc6abbdf082e93562c316c9eec2e2a640f2ef55242ab8fd9a54ecdc17bd75b82eed63d706318dfa4051f718a2f7041716cd3eeb6ad5f250892f20fd1ec58a69429a2a98776083973bf53b42175be67f9820d3c95bd5ba834b07e30ec80b63dcf6b3f5ed68c070f9f6ce519566bdeb8f09ec4b25381a079bdbc18da0108d7f4216c997b6b2f6109e641e55d3a6bb648efb23df383b2abd4f4c67b1fed7ba4dc3340ab2a0e250b670d1755a2f60ca9f01dd21326f57b2f0ff2030ae8cb3ce3a08560a6794ba94ffcc813677745f85e415993c1acf31de7496293862e0c067a26a7580233167fd9ecfa2a353080c974e7bfd2ad722e6738b47d0f3431dfa40c953c366cf5215dd5666380e6b39632349005b363c0438c99a64646f482eb3b2716713d9d6fefdbed0087f9aec11b8f4954fe4cc9accc90a2a7e2b8caa4b764d68d1f7631a45de5015d7bd11a89b07b916ccd5519a000a0084662f6afb630c8ce9251df0e2e8730c4a36a16f099ceef19a2155db950299535708f73936e632bb8468b359d7c9ef082def64773cac87f1a817826f6fe5a872a023084a20ac9d562e128e0d9b3aee28d297c88975d965d2e4637b8e2a50adc208cdef4ade6523eb6f04603dcaaf228141930fd12640acb0b2b8228ac616988557ef2563fa75a59883ccaaf7fbaa047490b71a14a2ed74c23c47f30baf5b8245711bfe8477a311770fd7db9f45b460ec4376d92ff7d334c6b3b2c85a26650a41d4c3d09c874aea387a18f85f4843c4d3b6506dcc92b7fa51846d36c73fe7a0d70d4d19ab12e3717aaf09bbbe4ef48abdb2c77af27fc14dea7bffe6105a83243999d8c9b3f15522b79d5492810f8b83f436e6294534e925ef3229170d4506122c0ae48b8d4b205963a9c80eb9b39c34264d975aef52d8de37d29b36f144419ee259b71e85745a71125bebb1ac07e6452b0adb18448d370883d5c73362d6f710a8ac1d9fac973de5c8afda17707c92111ebbfe9b40e045230f7b79f0ac6303c9291d1d559c7236cd2cf2c881b940790ca824bc0e7b37a0300a277ff0893036d5c1c3dc1fcc1379a8c2867051a6ac92ac39b5429058b4d86eb079ecf80d0f9c6650eb63a687bcaba16fce09bd30efe0f90a0d56f94711e7cfcf4d1355132f7922386adf88cfad521f9cbbf9ed59f9a6e43fa6aff16cb41f7bc0f5ad3393e03468150582bbbd107a02163e3f66b6626f617a9fd2e635ed54796cb8f88bcf8548541e589a557274e89c97564602ee0c43c5e334897f779f0315efb38d95a9857ca75fa47923043bc8254609cafe50372291b4b916c8c7207c1388df313d4cad12e7ca92394613a79ac3f1a8f3b7154a4a035ade4d8da848852f7fe905b5ad7215e66827b338d2261201a7772fd2c776530bf71981949149fa2876437538f19fe8ecadcc2c062f27d4f75f1cb58c8cc41e5ea8588c6595a5784c8c2501ff7bf75a54b506a58d6fbed8c3deb4da2ac3bd311ea7e3fb34ccc8685b5427f1938347876651fa33b9f3bcb680539bf80b50be33eeb2f084f32bbd22155be4af059db57ceb565aa5346810c5978a98d14d78474121ab8bdeb2b2904540b6c807998c1b6db0353d706f6e7fd88cf384b058d413491b0a6ec566e8296e3920048d0e41d5ac1ad2304e35925a117ec4f86e4ce39d103959261f6ba3c688b3a145efda58d45c5c2b8c83cab91d4334b1dd72b24cd730061db0bc7f7bfdcd89f61ac001fc1c5d770d3e6adbd8c8a2e9d848f8be6949a73c340081a38baa044ad342ae211709143564ae380608ebbb0c8361f52240d8e514f689e47094673057cd264f186383d4c60ac6f839fcd38a41fb663d717b0e087810b3a2e56eb4e1e73f57a5878ec6865b3cc43998a70396944e1da8abd4fd54308a0e08aef094edc0a7d28c823b8693f4b28e0f5006a465e49ccc3555b12f62b5a198ebfde8407f76117690df5c15ad910d0e32666f5e32"}, 0x1008) 00:05:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb64c86d4f66732e66617400020441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000a00)='./file0/file0\x00', 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x3f) fstatfs(r0, &(0x7f0000000940)=""/128) [ 345.464855] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 345.494622] FAT-fs (loop5): bogus number of reserved sectors [ 345.500555] FAT-fs (loop5): Can't find a valid FAT filesystem [ 345.570206] FAT-fs (loop5): bogus number of reserved sectors [ 345.576131] FAT-fs (loop5): Can't find a valid FAT filesystem [ 345.632800] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 00:05:45 executing program 4: r0 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 00:05:45 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 00:05:45 executing program 7: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="9cfa0f07b4c0b56436bfbf97", 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000240)) 00:05:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 00:05:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1bc}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0xd, &(0x7f00000001c0)={r1}, 0x8) 00:05:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x101000) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in6={0xa, 0x3}], 0x1c) sendto$inet6(r2, &(0x7f0000000400)="b8", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x113080) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000300)={0x7, {0x2, 0x4e23}, {0x2, 0x7, @rand_addr=0x101}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1, 0xff, 0x4, 0x7, 0xffffffffffffffff, 0x0, 0x7, 0x400, 0xcc24}) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x900, 0x0, &(0x7f0000000200)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000003c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) r4 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2=0xe0000002, @in, 0x4e24, 0x5, 0x4e20, 0x7db, 0xa, 0x20, 0x80, 0x33, 0x0, r4}, {0x5, 0x5, 0x6be, 0x10001, 0xd245, 0xff, 0x39aa2991, 0x1}, {0x0, 0x2, 0x7, 0x7ff}, 0x1101abe4, 0x6e6bb2, 0x1, 0x1, 0x3, 0x3}, {{@in6, 0x4d5, 0x6c}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3507, 0x2, 0x3, 0x0, 0x8000, 0x2, 0x4}}, 0xe8) [ 345.749197] FAT-fs (loop0): Directory bread(block 2561) failed [ 345.757527] FAT-fs (loop0): Directory bread(block 2562) failed [ 345.771213] sctp: [Deprecated]: syz-executor1 (pid 23942) Use of int in maxseg socket option. [ 345.771213] Use struct sctp_assoc_value instead [ 345.785308] FAT-fs (loop0): Directory bread(block 2563) failed 00:05:45 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 00:05:45 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x12, 0x0, 0x4, 0x108000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) [ 345.794502] sctp: [Deprecated]: syz-executor1 (pid 23946) Use of int in maxseg socket option. [ 345.794502] Use struct sctp_assoc_value instead [ 345.801672] FAT-fs (loop0): Directory bread(block 2564) failed [ 345.835091] FAT-fs (loop0): Directory bread(block 2565) failed [ 345.841946] FAT-fs (loop0): Directory bread(block 2566) failed 00:05:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x1ff, 0x5}) 00:05:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 345.849837] FAT-fs (loop0): Directory bread(block 2567) failed [ 345.863326] FAT-fs (loop0): Directory bread(block 2568) failed [ 345.869821] FAT-fs (loop0): Directory bread(block 2569) failed [ 345.876812] FAT-fs (loop0): Directory bread(block 2570) failed 00:05:46 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000d2, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:46 executing program 5: unshare(0x40000000) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x20000) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$void(r0, 0xc0045878) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000100)="220000002000070700be000009000701020000000000000000200000050013800100", 0x22) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, {0x2}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x27, 0x0, 0x7cf8}) 00:05:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) setrlimit(0x0, &(0x7f0000000480)={0x3, 0x3}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = creat(&(0x7f0000001540)='./file0\x00', 0x100) recvmsg$kcm(r4, &(0x7f0000001ac0)={&(0x7f0000001600)=@nfc, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/151, 0x97}, {&(0x7f0000001740)=""/116, 0x74}, {&(0x7f00000017c0)=""/68, 0x44}, {&(0x7f0000001840)=""/242, 0xf2}, {&(0x7f0000001940)=""/94, 0x5e}], 0x5, &(0x7f0000001a40)=""/90, 0x5a, 0x59}, 0x10040) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000001b00)={0x4, 0x4, [0x33c]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f0000001580)="0f20d835200000000f22d82ef08254faef60b9800000c00f3235001000000f30db5ce90539a906000000f2f30f234466b809010f00d0c4e2e0f35200b8000000000f23c00f21f835030002000f23f80f001b", 0x52}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0xffffffffffffffff, 0xe9, 0x2, @scatter={0x2, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/82, 0x52}]}, &(0x7f0000000300)="eccf34414f51056952fba7d41ed4530db89c287b4b1509b1bdfd470ed170832a4b395acfccb7e9f79d3846e4411046435577484b19df7c0098e72b7bc4f4b4f72f4480b97070089c2ef8b92ca67b95efb4ed3d99d695031b1cbfccc9ac26a12049fc4c753c9e75b1b6be5390b3993e19fc4a5c4053d718fb73f1304dc65d25693d93ef04d3348867a44191e55680804a451b3cfbd4742696ce35e5aa1eb01a5f2dcb967640f19497f71b81866d472273c3e2e2553a7cce7dfc2734eb4ec26d0776efc535f81d00cef5d0b26ac48693470ed3b48267f08e8325a824b03d19ea48faad0c6e88d15c9082", &(0x7f0000000240)=""/17, 0xc38f, 0x20, 0x1, &(0x7f0000000280)}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x1f]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000001500)={0x5, 0x9}) 00:05:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2000, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:05:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 00:05:46 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 00:05:46 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0x1, @multicast1=0xe0000001, 0x4e23, 0x4, 'lblc\x00', 0x10, 0xd0, 0x6a}, {@loopback=0x7f000001, 0x4e20, 0x0, 0x0, 0x6, 0x1278}}, 0x44) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x2, &(0x7f0000000140)="9c66dda244e5f106e1ad2485df54d04b539e40fe583a9ac9ee7b77002785ff43ebb59f41d052bfafa730cff8172e2b2100c1dd6462ae872fa45853a08182020a2b011cebe491f4719fc3eb740c81b5895f6e2a6cfde1d27d75bd59cae1a12b0cd8c4559a4abce901fcb71438d6c48b4cdd5d5f194759e53b4d3ef4a4f67ff0f10a9dcbb14c0b8417bc46265abcc0045d2b") ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ff2d3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x131200, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 346.402391] IPVS: ftp: loaded support on port[0] = 21 00:05:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:05:46 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xf0, 0x1e0, 0xf0, 0xf0, 0x1e0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f00000000c0), {[{{@ipv6={@empty, @empty, [0xffffffff, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffffff, 0xff], 'lo\x00', 'vcan0\x00', {}, {0xff}, 0x3f, 0x8, 0x0, 0x8}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0xf3, 0x1, 0x28}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @empty, [0xffffff00, 0xff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'bridge_slave_1\x00', 'veth1_to_team\x00', {}, {}, 0x21, 0x2, 0x5, 0x20}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x400) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2000001) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22}], 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x168, 0x168, 0x388, 0x278, 0x388, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {'bridge0\x00', {0x40, 0x8, 0x5, 0x3, 0x9, 0x10001, 0x20, 0x40, 0x40}, 0x8}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0xbc80, 0xffff}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0xffffff00, 0xffffff00], 'bond_slave_0\x00', 'dummy0\x00', {}, {0xff}, 0x29, 0x8, 0x2, 0x1}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv6, @ipv6=@local={0xfe, 0x80, [], 0xaa}, @port=0x4e22, @port=0x4e20}}}, {{@uncond, 0x0, 0xc8, 0x110}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @gre_key=0x1, @port=0x4e24}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x0, 0x1, 0x1, [0x6, 0xa68, 0x7ff, 0x7, 0x7ff, 0x401, 0x3, 0x7f, 0x9, 0x8, 0x4, 0x400, 0x7, 0x9, 0x8a, 0x1f], 0x8}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x2, 0x101, 0x8, 0x4, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv4=@loopback=0x7f000001, @gre_key=0x1, @icmp_id=0x68}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x640) ioctl$int_out(0xffffffffffffffff, 0xc0305711, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000011c0)=0x0) stat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001340)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001380)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f0000001500)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000001540)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001580)={0x0, 0x0}, &(0x7f00000015c0)=0xc) r11 = getegid() sendmsg$unix(r2, &(0x7f0000001700)={&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000d00)="ea2b44e4a1fdac9b7901d06a31a46a5b563534e8933fb35cd4a339c1c257f32cc2e73b73fa5fd89797adc68798a05863da1fe30f7feb7bcec27070917da82fb089687a6b81313ae827ef6eeda06e09737dce010bbe3fb5297589b9a5e09b035cfa17236949719649b60144710b807a7c84eebc319fc65af4a9d7f42d7c04ed7f06331e8cce2dca1a3bce302fc696d8baa30a2c72bc6b04491803bae37584b4e463269355c4a9", 0xa6}, {&(0x7f0000000dc0)="94ae6000401ea8b7c8289dc124c8a65c8891a1ef4c4d71b281996991e487f36a495a2b1fba57ab0ba276", 0x2a}, {&(0x7f0000000e00)="9f693f344b76e6076fb3bd18d4fcab6d6ae76f28dc6f0f24e0f43926a16df24a87906883150107adc9e55cd1ebaf6e5edf5c4bbef30050300ea8dc7df3010c87900adc97de65f138f31640f9cbc465136965d51785195267bb7455b44e755cd13ded74faf8f276022fc4a5c4fda94e93070d467e4014c9862b55701b22b372", 0x7f}, {&(0x7f0000000e80)="0f34449a88235f96c04e9c0fa4031b6a61ec01f659ca40b897ef762322b36b226e0db15bc9b08f7ca43279b298acbe28353654ce35c76c9c0423315fc95d40b4d0b59b5e7456f3fae3ab6773a9391314af88c194f078f59e6996de1934775791403cba2e119087cf7da0a2bd4e226159c5a4d8b58f66a6a4a7bcd326102333e6ef895b53a8d85d3993f37c7b8ebb4bee91e3495fcf22a6aa76db717988451c4aac534573bd66388caa6d5b4bcff21bb18ef9b3233dba3c3bdbbdb661ad67df8a4af105de22d31072", 0xc8}, {&(0x7f0000000f80)="1f1e5a75b65fa8af253d396fbce16ab2d89df2ef5e66ab653ac4b787a64445e6472655cb1dc9dc7fdb211968d80acfef4cddd0e9dc78ee545232ab20755b1cfb5a476697147a75abae456bf35504011ba5d1448d975a1dbec1a42f1b8c", 0x5d}, {&(0x7f0000001000)="c4b15e5e96adcafb06a45e22514930d5080c9995a72ba9a303f9c53ec74415ccb4ac99d935de72efb8dd8bcc62f6610456293575b4f752cad9fe4a4e965891a1c590f63c9dc1c92889f2bb72839b0749fa2490797fc127b4b94db0aabde3ab9227c306449cf261b109c52a83d79ef4124e9787a70177b6f3dafb4c1ab3972b5f5a3f980cde09c5f4d7e8f3d4bea65735613683e99117e357eb8244c42c078aad8d3f50ca3f4c667eb43b5f", 0xab}, {&(0x7f00000010c0)="8e671e3e0096eed914209edcfa9c2341de709f8286d548605945d5d441aad3dc679a7d6c88b418a052ae315f95dc29c732be67a1dafc4b2fc938c4ac475283dc2e", 0x41}], 0x7, &(0x7f0000001600)=[@rights={0x18, 0x1, 0x1, [r0, r2]}, @rights={0x38, 0x1, 0x1, [r1, r1, r0, r2, r0, r2, r2, r1, r2]}, @rights={0x28, 0x1, 0x1, [r0, r2, r1, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x100, 0x4000}, 0x10) 00:05:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x4, 0xa, 0x3) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fffffff}, {0xa, 0x4e24, 0xefb5, @local={0xfe, 0x80, [], 0xaa}}, 0xdd3, [0xfff, 0x800, 0x0, 0x2, 0x3ff, 0xffff, 0x1, 0xf8e7]}, 0x5c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sysfs$3(0x3) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) sendto(r0, &(0x7f0000000200)="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", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 00:05:46 executing program 7: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x100002000, 0x1000}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @remote}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast=0xffffffff, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x1, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x2c, r2, r3}, {0x80000001, 0x3, 0x4cff45c0, 0xffffffff, 0x0, 0x5, 0x401, 0x99}, {0x9, 0xffffffff, 0x3, 0x7}, 0x2, 0x6e6bb1, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d4, 0x3c}, 0xa, @in6, 0x3504, 0x3, 0x0, 0xfffffffffffffff8, 0xc9a, 0x20, 0xfda}}, 0xe8) 00:05:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 346.653545] device lo entered promiscuous mode 00:05:46 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x81, 0x141000) getsockname$llc(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='pffff\a\x00\x00\x00\x00\x00\x00\x00fff,\x00']) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0x4) socket$inet6(0xa, 0xe, 0xfffffffffffffffc) 00:05:46 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x8000, 0x58000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0x8, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x1, [{{0x2, 0x4e24, @broadcast=0xffffffff}}]}, 0x110) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040), 0x4) munlockall() pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffff9, 0x80000001, 0xffffffff80000001, 0x800, 0x7, 0xfffffffffffffffd, 0x1ee}, &(0x7f0000000100)={0x8, 0x8, 0x5e, 0x9, 0x0, 0x2, 0x0, 0x4}, &(0x7f0000000140)={0x5, 0x8, 0x8, 0x1, 0x1, 0x5, 0x100, 0x80000001}, &(0x7f0000000180), &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) [ 346.703930] IPVS: ftp: loaded support on port[0] = 21 [ 346.745436] device lo entered promiscuous mode [ 346.808577] hfs: unable to parse mount options 00:05:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 346.855646] hfs: unable to parse mount options 00:05:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000021d, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') timer_create(0x2, &(0x7f0000000080)={0x0, 0x35, 0x2, @thr={&(0x7f0000000280)="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", &(0x7f0000000000)="e10e0096a0f1613cbce1"}}, &(0x7f0000000100)=0x0) timer_delete(r3) sendfile(r1, r2, &(0x7f0000000040)=0xf0, 0x80000002) 00:05:47 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000042fdd80d697b465b36f3ebf0d61c4ded81ec1c81644b72c915d408125d20b8a869e4955e6724f15b574d13f72b7ab7784f5543946ff3cf74ab60d874a00031ab628fda3d4d435cc8f521327b0dddb455eb044c4ab206a9b9f48a741572cdf87c2e3c64e94013f3f106598a71bfafee5df2aed262ec62a0a5df9d13d73178f9d4cb55a16601f8ccf929b841103edbbfa6cf2590ec64dedd2a129897b9b9d47d804f1dde54de10adfa6780a6dc3844bf2df149e14ef2144221b3822823cc0ef1d62f1e3add3f12b48e9125b5d0601f3e33527d16a420014f9685b9c8875343a55c9ed325a3026d9a8497", @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25100000002000010014000300ac1414140000000000000000000000000800010002000000400001000800020000000000080002003e00000008000500030000000800050003000000080004004e23000008000b00736970000c0007000000000008000000080006000180ffff"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r2, &(0x7f00000000c0), 0x0) r3 = epoll_create(0x100000001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x4) bind$llc(r4, &(0x7f00000001c0)={0x1a, 0x338, 0x80000001, 0x401, 0x1ba9e259, 0x6c8d, @random="e09a640d0fb7"}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 00:05:47 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x48010, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) 00:05:47 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x182c0000000000b}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x3e, 0x2}, &(0x7f0000000100)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180)) 00:05:47 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f00000000c0)=""/101) 00:05:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) 00:05:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x8000, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) mq_timedsend(r1, &(0x7f0000000080)="6385ff90", 0x4, 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}) 00:05:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) getpeername$llc(r1, &(0x7f0000000100), &(0x7f0000000280)=0x10) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000180)=""/207) migrate_pages(r2, 0x80000001, &(0x7f0000000940), &(0x7f0000000040)) 00:05:47 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="04630501f6ff"], 0x0, 0x0, &(0x7f0000000500)}) 00:05:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) 00:05:47 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) listen(r0, 0x100000002) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000001300)={'HL\x00'}, &(0x7f0000001340)=0x1e) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000240)=""/4096) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$update(0x2, r4, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000140)=0x7, 0x4) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001940)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000001a40)=0xe8) r7 = getgid() sendmsg$unix(r1, &(0x7f0000001ac0)={&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001780)="eb0dd5d36512a2277c8f4b652dad08cff0dd97b9e9c6ffe128b29c50e7dd8df816d9c39b62220b0b7afd09afd78ddabc28506b746b7b67b76805a19a555596a2b7b4f21e26ed923f4d29fb7c75799a50110468d3170595a7d413e2", 0x5b}, {&(0x7f0000001800)="ce3b021365512189bf00f8e79fb1b41b7abcdf51878eb45cec4b756529c7003d84f669823fcefa1350aa357ab53e6064cd446a66e52ca8bb227f58dddfc00028471b3edcf386807aed69af371a220256c0a8c9795998262bf2fb1671b8e722db53a833af812c502ea7aa1a883e7ef2f114b4915456e52cbde7d27f5c2f9e8f8be349f6c61b510e28da509c94ebda9ba976f943b033609a6fa2da5fcc985b2642b21a67b3332afb53312ffbecbf0815bfd991398871e40a3999d4e9c792c0f14f386d71c16759d697c0130d6136a9df01b1445bbfbdaffd26d6728ef47123b9548a0559", 0xe3}], 0x2, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x48881}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @loopback=0x7f000001}}}}, &(0x7f00000000c0)=0xb0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001380)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}}}, &(0x7f0000001480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000015c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001600)={{{@in, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0xc3, 0x4e23, 0x80000001, 0x2, 0x20, 0xa0, 0x5e, r9, r10}, {0x1, 0x9, 0x3, 0x2, 0x1, 0xffffffffffff7fff, 0x1, 0x1}, {0x6, 0x8, 0x4, 0x2}, 0xef25, 0x6e6bbd, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4d4, 0xff}, 0xa, @in=@loopback=0x7f000001, 0x34ff, 0x1, 0x0, 0x80000001, 0x100000001, 0x929a, 0x80}}, 0xe8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000001240)={r8, @in6={{0xa, 0x4e21, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0xb94}}}, 0x84) 00:05:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000002c0)={0x9, 0x20, 0x4, 0xfff, 0x5, [{0xff, 0x0, 0x401}, {0x6, 0x3a, 0x3ff, 0x0, 0x0, 0x100d}, {0x2, 0xfffffffffffffffc, 0x100000000, 0x0, 0x0, 0x220c}, {0x7, 0x1c5, 0xe0, 0x0, 0x0, 0xa01}, {0x5, 0x0, 0x10001, 0x0, 0x0, 0x2c02}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x66, 0x121002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1dd9, 0x3, 0x4}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 347.831532] binder: release 24103:24104 transaction 47 out, still active [ 347.838514] binder: unexpected work type, 4, not freed [ 347.843843] binder: undelivered TRANSACTION_COMPLETE [ 347.849342] binder: 24103:24104 unknown command 17130244 [ 347.868424] binder: 24103:24104 ioctl c0306201 20000080 returned -22 [ 347.898045] binder: BINDER_SET_CONTEXT_MGR already set [ 347.928632] binder_alloc: 24103: binder_alloc_buf, no vma [ 347.934302] binder: 24103:24104 transaction failed 29189/-3, size 24-8 line 2967 [ 347.937927] binder: 24103:24107 ioctl 40046207 0 returned -16 [ 348.003994] binder: send failed reply for transaction 47, target dead [ 348.010851] binder: 24103:24104 unknown command 17130244 [ 348.053200] binder: 24103:24104 ioctl c0306201 20000080 returned -22 [ 348.103247] binder: undelivered TRANSACTION_ERROR: 29189 00:05:48 executing program 4: syz_mount_image$vfat(&(0x7f00000011c0)='vfat\x00', &(0x7f0000001200)='./file0\x00', 0x0, 0x0, &(0x7f0000002640), 0x8008, &(0x7f0000002700)=ANY=[@ANYBLOB='nnonumtail=\x00']) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10b500, 0x12) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='eth0cpuset\x00', &(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='nnonumtail=1', &(0x7f0000000140)=']$self\x00', &(0x7f0000000180)='nnonumtail=1', &(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='vfat\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='-keyring\x00', &(0x7f00000002c0)='nnonumtail=1', &(0x7f0000000300)='nnonumtail=1', &(0x7f0000000340)='nnonumtail=1'], 0x1100) 00:05:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) 00:05:48 executing program 1: mount$9p_virtio(&(0x7f0000000080)="cf2300", &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1040c0, &(0x7f0000000140)={'trans=virtio,', {[{@uname={'uname', 0x3d}, 0x2c}, {@access_any='access=any', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@version_u='version=9p2000.u', 0x2c}]}}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x9c3}, 0xc) setrlimit(0xd, &(0x7f0000000000)={0x2, 0x1}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") 00:05:48 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000449000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x96, "190e3a3c1dca3c7843540adebb8a6eeb6a298defe6abfa43feda0a96d357313eb4972b3e663c2f0964d2847da90477768f3ddb1b6e619ea3ebcfea4c2e30e2c3745c8d7e0429d20f6a7c35763f5a5d5b7bc39d52d9c48e0f356ba1a1655608b5804e1a6ba8d4ead67c43846bd3b88db4fc9b00f6e4325d56b5dab1f0b3384c9200975c2a5f09d9c31304ef57e26576a6b235a1b3498d"}, &(0x7f0000000100)=0x9e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={r1, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x8) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x7fffffff, 0x20000) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000280)={0x10207, 0x0, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x0, 0x4}, 0x8) 00:05:48 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x200, 0x6]) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xf, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000170000791004000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x616, &(0x7f0000000080)=""/251}, 0x18) 00:05:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000f3, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:48 executing program 7: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) accept$packet(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x14) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbd}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 00:05:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 00:05:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f000082ef0a)=""/246) dup2(r2, r1) ppoll(&(0x7f00000002c0)=[{r1}], 0x39a, &(0x7f0000000300), &(0x7f0000000340), 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x200, 0x3, 0x4, 0x4, 0xfffffffffffff204}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @rand_addr=0x1}}, 0xf1, 0x6, 0x7fffffff, 0x8, 0xa0}, &(0x7f0000000140)=0x98) 00:05:48 executing program 3 (fault-call:8 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) ioprio_set$uid(0x3, r3, 0x1128) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008d03000000000000000000000068d500"]) [ 348.664761] FAULT_INJECTION: forcing a failure. [ 348.664761] name failslab, interval 1, probability 0, space 0, times 0 [ 348.676108] CPU: 1 PID: 24145 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 348.683474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.692829] Call Trace: [ 348.695426] dump_stack+0x1c9/0x2b4 [ 348.699065] ? dump_stack_print_info.cold.2+0x52/0x52 [ 348.704263] ? lock_downgrade+0x8f0/0x8f0 [ 348.708428] should_fail.cold.4+0xa/0x1a 00:05:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) [ 348.712499] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 348.717611] ? lock_downgrade+0x8f0/0x8f0 [ 348.721771] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.727312] ? proc_fail_nth_write+0x9e/0x210 [ 348.731821] ? find_held_lock+0x36/0x1c0 [ 348.735909] ? check_same_owner+0x340/0x340 [ 348.740239] ? __lock_is_held+0xb5/0x140 [ 348.744308] ? rcu_note_context_switch+0x730/0x730 [ 348.749245] __should_failslab+0x124/0x180 [ 348.753492] should_failslab+0x9/0x14 [ 348.757304] __kmalloc_track_caller+0x2c4/0x760 [ 348.761989] ? strncpy_from_user+0x510/0x510 [ 348.766404] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.771947] ? strndup_user+0x77/0xd0 [ 348.775758] memdup_user+0x2c/0xa0 [ 348.779306] strndup_user+0x77/0xd0 [ 348.782946] ksys_mount+0x3c/0x140 [ 348.786497] __x64_sys_mount+0xbe/0x150 [ 348.790481] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 348.795501] do_syscall_64+0x1b9/0x820 [ 348.799391] ? finish_task_switch+0x1d3/0x870 [ 348.803893] ? syscall_return_slowpath+0x5e0/0x5e0 [ 348.808831] ? syscall_return_slowpath+0x31d/0x5e0 00:05:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000000)) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/242, 0xf2}], 0x1, &(0x7f0000000200)=""/101, 0x65}, 0x0) [ 348.813770] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 348.819142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 348.824000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.829184] RIP: 0033:0x455ab9 [ 348.832364] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.851713] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.859779] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 348.867043] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 348.874309] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 348.881576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 348.888845] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000000 00:05:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 00:05:49 executing program 3 (fault-call:8 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:49 executing program 7: r0 = socket$inet(0x10, 0x1, 0x8fc8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0xa7, &(0x7f00000003c0)=[{&(0x7f0000000000)="2400000004061f001cfffd946fa2830020200a0009000000a3a20404ff7e000000000000", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@generic={0x0, "892c1bf29cab999ba650fad4cc1511f94bd21e7e1f1137220512cab46549d2537820de44ff615170d8d8869b24bf859df7b7de5cc9a6cca60687eebcbd8b1d548e8eacea16d75af95966a1aa2130f5774238b98a0c37de61f369ee7f13fa8900dd0befffd104a12cddb4ca43916317a4ffc8b19b8fa6cf4588325f4a00cc"}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="24b7d44209a062c8a39c090a119c9ba4bf9f62bd614d2878bdae6d3c223e71080f03289ac8f1c3166a5bb0d924065e11abe27951047eb1cc92b4ee85993852843755c0bbb32c7213bd8024", 0x4b}, {&(0x7f0000000200)="b307b9f765079e368ab1bdc26afa72178e79ef1100c8e4583a284ac5f5c8d2faa56a7ddf316302e79ca8d323cff9deee3b2255593f6b7624001898b5607bae8c3a687d8322d2dc94497b3a6cd5638c4e45d5a43ae1b1743ff6c309d29b70fd2a83c269c66e39fb0e5f0806c5a2376f82e459b87a39edc7b5caec89ef4e3e8b193004a70eb41686d9704178e6d77fc82f8cf178746948d511bb8ce03405227d0b1b5ccc29e0d7999e91246fe56997f9baaf6eaae7f158368a49c75907a2a70b8c657ac0ba2db07ae77702b72812c655c8604ae018580948a3277ab30f9195034bf8f0d7962158db69b3f8bcf70f5b27d84431", 0xf2}], 0x2, 0x0, 0x0, 0x800}, 0x44000) 00:05:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000000)='./file0\x00', 0x11c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50040, 0x50) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="db67961500000065ffff0900000008003952333030302e75"], 0x15) 00:05:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f000082ef0a)=""/246) ioctl$EVIOCGREP(r1, 0x8004745a, &(0x7f00000000c0)=""/174) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x1003}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r2, 0x42, 'C\a*', "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"}}, 0x110) 00:05:49 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000000080)="74f00178a93a974f4b4ab612178606aca2d3c3", 0x13, 0x4000004, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 349.190404] FAULT_INJECTION: forcing a failure. [ 349.190404] name failslab, interval 1, probability 0, space 0, times 0 [ 349.201780] CPU: 0 PID: 24187 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 349.209145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.218494] Call Trace: [ 349.221094] dump_stack+0x1c9/0x2b4 [ 349.224736] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.229924] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 349.234757] should_fail.cold.4+0xa/0x1a [ 349.238805] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.243902] ? kasan_kmalloc+0xc4/0xe0 [ 349.247778] ? __kmalloc_track_caller+0x14a/0x760 [ 349.252605] ? memdup_user+0x2c/0xa0 [ 349.256309] ? strndup_user+0x77/0xd0 [ 349.260091] ? graph_lock+0x170/0x170 [ 349.263880] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 349.269409] ? proc_fail_nth_write+0x9e/0x210 [ 349.273891] ? find_held_lock+0x36/0x1c0 [ 349.277950] ? check_same_owner+0x340/0x340 [ 349.282267] ? lock_release+0xa30/0xa30 [ 349.286239] ? rcu_note_context_switch+0x730/0x730 [ 349.291166] ? __check_object_size+0x9d/0x5f2 [ 349.295664] __should_failslab+0x124/0x180 [ 349.299902] should_failslab+0x9/0x14 [ 349.303709] kmem_cache_alloc_trace+0x2cb/0x780 [ 349.308396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.313931] ? _copy_from_user+0xdf/0x150 [ 349.318074] copy_mount_options+0x5f/0x380 [ 349.322296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 349.327817] ksys_mount+0xd0/0x140 [ 349.331345] __x64_sys_mount+0xbe/0x150 [ 349.335317] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 349.340325] do_syscall_64+0x1b9/0x820 [ 349.344205] ? finish_task_switch+0x1d3/0x870 [ 349.348692] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.353604] ? syscall_return_slowpath+0x31d/0x5e0 [ 349.358531] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.363882] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 349.368710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 349.373891] RIP: 0033:0x455ab9 [ 349.377064] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.396294] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.403980] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 349.411229] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 349.418480] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 349.425732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 349.432985] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000001 00:05:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r3, r3, &(0x7f00000000c0), 0x5) 00:05:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 00:05:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffc) ioctl(r0, 0x8000000000008912, &(0x7f0000000280)="025cc83d6d345f8f7620f0") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4d5, 0x40041) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7f, 0x4000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="66f40f32660f2167f20f019c4d00000100660f388076000f07440f20c0350a000000440f22c0f20f7dace75d000000c4e12dde38c4c2a9be2b", 0x39}], 0x1, 0x49, &(0x7f0000000180), 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x7f, 0x4, 0x10001}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xc4}, 0x1}, 0x0) 00:05:49 executing program 4: r0 = socket(0xf, 0x0, 0x10000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e21, 0x3, @loopback={0x0, 0x1}, 0x800}}}, 0x84) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x6, 0x0, 0x401, r3}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'syzkaller1\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4, 0x9fb, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2}}}, 0x84) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0)={0x303, 0x33}, 0x4) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r5, &(0x7f0000000340)="11d04960fc28d756085a0b3ddfeb8c2ed4e891d738f0b6b036cfb40c45e5b875aebfa224d840db403240c88fd259252d10928290a6e33ee9b4f45f81eebf7b262ed53fbb6a1abe9ead62cd0d8c79ef0da5c9e4eaa5e9908e918b94173fc1f430866b573d0572678a47e0314a0870cd0bcdc74e11bc5de0bf2ae6249a080cb12d11c2", 0x82, 0x8844, &(0x7f0000000400)={0xa, 0x4e23, 0x7fff, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, 0x1c) open$dir(&(0x7f0000000440)='./file0\x00', 0x187082, 0x1) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x40000, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f00000004c0)={0x10, 0xfffffffffffffffe, 0x8}, 0x10) sendto$inet6(r6, &(0x7f0000000500)="6c299b2885ef6c70ae6f1907c31c0abdd6118a9af74122b95bf7b1dd21f979dd2ac96b5e713174bab90d63c9342540b945f8482ac33038155c043658b649492abb9b05d0a70d2e093f0f2d2e3b673bdfd8a230708596f6bddc5fdb3cde4f808ee1b14de902f2583ada822f9694d9a523c1273180f8448c576beb7065875e1a9a08f0f4b7659cd5be37e94b0a0e6333846ccfc91b556bd39a382f063dcceffa2f7f3a8e8d9bddbbc6082e422af3d29748a92a020471fb02", 0xb7, 0x1, &(0x7f00000005c0)={0xa, 0x4e23, 0x80, @loopback={0x0, 0x1}, 0xff}, 0x1c) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000600)) r7 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x50, r6, 0x0) r8 = mmap$binder(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2, 0x5050, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000980)={0x110, 0x0, &(0x7f00000007c0)=[@increfs={0x40046304, 0x3}, @register_looper={0x630b}, @register_looper={0x630b}, @transaction={0x40406300, {0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000640)=[@fd={0x66642a85, 0x0, r5}], &(0x7f0000000680)=[0x38, 0x0, 0x18]}}, @reply_sg={0x40486312, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x38, &(0x7f00000006c0)=[@flat={0x0, 0x1, r7}], &(0x7f0000000700)=[0x78, 0x18, 0x78, 0x0, 0x28, 0x78, 0x0]}, 0x2}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40, &(0x7f0000000740)=[@fda={0x66646185, 0x6, 0x4, 0x20}], &(0x7f0000000780)=[0x28, 0x40, 0x58, 0x40, 0x0, 0x18, 0x40, 0x18]}}}, @enter_looper={0x630c}, @register_looper={0x630b}, @increfs_done={0x40106308, r8, 0x3}, @increfs={0x40046304, 0x1}], 0x4b, 0x0, &(0x7f0000000900)="2703dffe7b0bd3af2b44c0584d5be990d6c34d8f0a396e0ded7c51c161cefa72c21b14bc931f83c4b95eb3d3938ca97126578c35702aab8aed0fdf4131d236b3140de2c1b3953af3bf1977"}) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) signalfd(r6, &(0x7f00000009c0)={0x571}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000a00)={r2, 0x1f, 0x10001, 0x10001, 0x1, 0x8}, &(0x7f0000000a40)=0x14) r9 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r9, 0x2, &(0x7f0000000a80)=""/49) getpeername$inet(r0, &(0x7f0000000ac0)={0x0, 0x0, @rand_addr}, &(0x7f0000000b00)=0x10) accept4$unix(r6, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e, 0x80800) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000c00)) open$dir(&(0x7f0000000c40)='./file0\x00', 0x400000, 0x2) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000c80), &(0x7f0000000d00)=0x60) write$FUSE_OPEN(r6, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x5}}, 0x20) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000d80)={'filter\x00'}, &(0x7f0000000e00)=0x44) 00:05:49 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="20a2236065e1fa9f8f74909a9d377f1b8e1b5da967aa11009f04727149d201b5"}) r1 = memfd_create(&(0x7f0000000040)="73656c696e75787d776c616e3173656375726974796370757365741000", 0x3) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000000c0)) 00:05:49 executing program 3 (fault-call:8 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:49 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000014, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) [ 349.822221] FAULT_INJECTION: forcing a failure. [ 349.822221] name failslab, interval 1, probability 0, space 0, times 0 [ 349.833595] CPU: 1 PID: 24220 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 349.840957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.850304] Call Trace: [ 349.852898] dump_stack+0x1c9/0x2b4 [ 349.856537] ? dump_stack_print_info.cold.2+0x52/0x52 [ 349.861738] ? kasan_check_write+0x14/0x20 [ 349.865982] ? finish_task_switch+0x2ca/0x870 [ 349.870491] should_fail.cold.4+0xa/0x1a [ 349.874560] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 349.879675] ? __schedule+0x884/0x1ed0 [ 349.883578] ? __sched_text_start+0x8/0x8 [ 349.887732] ? find_held_lock+0x36/0x1c0 [ 349.891815] ? check_same_owner+0x340/0x340 [ 349.896147] ? save_stack+0xa9/0xd0 [ 349.899781] __should_failslab+0x124/0x180 [ 349.904025] should_failslab+0x9/0x14 [ 349.907834] kmem_cache_alloc+0x2af/0x760 [ 349.911995] getname_flags+0xd0/0x5a0 [ 349.915806] user_path_at_empty+0x2d/0x50 [ 349.919963] do_mount+0x17a/0x30e0 [ 349.923510] ? copy_mount_string+0x40/0x40 [ 349.927752] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 349.932519] ? retint_kernel+0x10/0x10 [ 349.936421] ? copy_mount_options+0x1e3/0x380 [ 349.940918] ? copy_mount_options+0x1f0/0x380 [ 349.945425] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 349.950278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.955825] ? copy_mount_options+0x285/0x380 [ 349.960331] ksys_mount+0x12d/0x140 [ 349.963971] __x64_sys_mount+0xbe/0x150 [ 349.967954] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 349.973085] do_syscall_64+0x1b9/0x820 [ 349.976977] ? finish_task_switch+0x1d3/0x870 [ 349.981481] ? syscall_return_slowpath+0x5e0/0x5e0 [ 349.986420] ? syscall_return_slowpath+0x31d/0x5e0 [ 349.991365] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 349.996738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.001589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.006780] RIP: 0033:0x455ab9 00:05:49 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='environ\x00') setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xb}, 0x3ff}, {0xa, 0x4e23, 0x8001, @dev={0xfe, 0x80, [], 0x10}, 0x706}, 0x7, [0x800, 0x8, 0x19a3, 0x9c, 0x5, 0x6c, 0xffffffffffff8001, 0x2]}, 0x5c) fchdir(r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}, 0x8000}, @in={0x2, 0x4e22, @multicast1=0xe0000001}]}, &(0x7f0000000200)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="070000007202000400000000000000fb813ece000000", 0x1ff) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000280)={0x2, 0x1000, 0x1, 0x6a, 0x2, [{0x800, 0xe79c, 0x8000, 0x0, 0x0, 0x2}, {0x80000000, 0x3, 0x5e, 0x0, 0x0, 0x3}]}) 00:05:49 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x200) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x6, 0xffffffff, 0x5}) fcntl$lock(r0, 0x800000000000007, &(0x7f0000000080)={0xfffffffffffffffc}) 00:05:50 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8480000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r1, 0x330, 0x70bd2b, 0x25dfdbfe, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x410000000000000a, 0x0) getsockname(r2, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) 00:05:50 executing program 4: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x81ff) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) fallocate(r0, 0x3, 0x0, 0x80000000) [ 350.009960] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.029322] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.037028] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 350.044296] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 350.051564] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 350.058828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 350.066095] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000002 00:05:50 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400401, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000100)={0x3, {{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x88) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x5, 0x2}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0xe3) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/anycast6\x00') readv(r3, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r3, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) 00:05:50 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) uselib(&(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) 00:05:50 executing program 5: socketpair$inet6(0xa, 0x7, 0x80000001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xce, "55c44ca318c720c4b89159cec66be85636cf79d6ec0442cc396d3e04511a2ba85929fdc0d54bc42bfab774db1a4fb8fee5fa3a8c82fab096c0d253cbb03e7eb0f3059724e6355e16243e74d724720b472f07d6e0f633657ff38cc9ee95bc0d09ca0aa8f18d50f64fca8c8de436684b1f961701fdc9c7e39d31468b680fbe5a14b2c99fe5153b88e9451d4ee0fc3e9ff469568b72ae8e36534959ff4d86ef9a79be03fb800a9a8a0c992d74e8e1ec0530a682d30efcda5b6c88430fc40337e1617f1954043ae60f45803a7f15d301"}, &(0x7f00000000c0)=0xd6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0xf4, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0xca16, @mcast2={0xff, 0x2, [], 0x1}, 0x60}, @in6={0xa, 0x4e23, 0x80000001, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}, @in6={0xa, 0x4e23, 0xff, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x26d6, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x1, @empty, 0x6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x3d480e3a, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff}, @in6={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0xa62a}, @in={0x2, 0x4e23, @loopback=0x7f000001}]}, &(0x7f00000003c0)=0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) r3 = open(&(0x7f0000000000)='./file0\x00', 0x410000, 0x4) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000040)={0x8, 0xe9b, 0x6, 0x3, 0x3}) 00:05:50 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140), 0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e22, @multicast1=0xe0000001}, {0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x8, {0x2, 0x4e21, @loopback=0x7f000001}, 'gretap0\x00'}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xe9, "87e6cfd5a9b9373f86f5b42a2bc78c721a9d0cc070014bf69575e38090014c996ef6ce24f1f324e14d8b1c12a28d40ebfdc34ca9b41f5038cc1a033c5ae79d3b6d98a8981e6ac8c341e1c0c42ddba70c4d975d51c5eb28424122c162eb9e49a13322ab0a593470311ecf8ee266e1d3ef133b9f1f674bcb8bdc72a6645e11c5b22230daee837e46ac238dfd8d0c8811e70e172c9998291efcb5bebffdbadd7bb7e8e78dccb5b2571bb18ae8de3ba494d9baa7b2f7f53679c38504326acc82c377dc94834d7f3787f8215d4b75d5589bc6bcee078bc8b89a621fa4d3b85a13fc8f40428c4b3353d4cdbb"}, &(0x7f00000003c0)=0xf1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r1, 0x5, 0xa8be, 0x8}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') sendfile(r0, r2, &(0x7f0000000180), 0x10004000000443) inotify_init() getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000000)=0x60) 00:05:50 executing program 3 (fault-call:8 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:50 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/wireless\x00') write$binfmt_elf64(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0x8, 0x2, 0x7, 0x0, 0x5b, 0x40, 0x2f1, 0x9, 0x5, 0x38, 0x2, 0x7, 0x46278a68}, [{0x6, 0x7, 0x400, 0x0, 0x4a3, 0x6, 0x401, 0x81}, {0x7, 0x8, 0x0, 0x3ff, 0xffffffffffffffff, 0x522701fc, 0xffffffff, 0x1}], "2fe3381228407c11327accededefcb4c1345e5a7b260e5bc5c8a649369a90272bf74b0b7d1c8e0cc5357c2c987251629d7d70a0caf7ac65c34df0454a042424208af68267c492995e077d9d0ae96fa448d6bcc51ae6092206226ac37593a07f1ed0eaa2a6ca419190dc7bfc45a9031dc86a9eb6955797aecac8fabe41714be133d2640d1745c8726d6e36601758bb6562bb63380cf070f1cf2df26cb91bdc319d21a7b95bbafae8428d2ba2a6b2d7d30e1b34581f42f1175b8cc0f20acffda34559cad6f94864fcb0ebcd797e8c300abfff2150f", [[], [], [], []]}, 0x584) readv(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f00000004c0)=""/113, 0x71}], 0x1000000000000016) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x803c) 00:05:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}) [ 350.373384] FAULT_INJECTION: forcing a failure. [ 350.373384] name failslab, interval 1, probability 0, space 0, times 0 [ 350.384750] CPU: 0 PID: 24267 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 350.392115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.401466] Call Trace: [ 350.404059] dump_stack+0x1c9/0x2b4 [ 350.407688] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.412879] ? find_held_lock+0x36/0x1c0 [ 350.416949] should_fail.cold.4+0xa/0x1a [ 350.421011] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.426119] ? kasan_check_read+0x11/0x20 [ 350.430262] ? rcu_is_watching+0x8c/0x150 [ 350.434406] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 350.438813] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 350.443223] ? find_held_lock+0x36/0x1c0 [ 350.447301] ? check_same_owner+0x340/0x340 [ 350.451625] ? rcu_note_context_switch+0x730/0x730 [ 350.456551] ? save_stack+0xa9/0xd0 [ 350.460179] __should_failslab+0x124/0x180 [ 350.464418] should_failslab+0x9/0x14 [ 350.468221] kmem_cache_alloc+0x2af/0x760 [ 350.472371] ? find_held_lock+0x36/0x1c0 [ 350.476436] getname_flags+0xd0/0x5a0 [ 350.480240] user_path_at_empty+0x2d/0x50 [ 350.484391] do_mount+0x17a/0x30e0 [ 350.487927] ? do_raw_spin_unlock+0xa7/0x2f0 [ 350.492341] ? copy_mount_string+0x40/0x40 [ 350.496572] ? rcu_pm_notify+0xc0/0xc0 [ 350.500466] ? copy_mount_options+0x5f/0x380 [ 350.504872] ? rcu_read_lock_sched_held+0x108/0x120 [ 350.509885] ? kmem_cache_alloc_trace+0x616/0x780 [ 350.514729] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 350.520267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.525799] ? copy_mount_options+0x285/0x380 [ 350.530295] ksys_mount+0x12d/0x140 [ 350.533926] __x64_sys_mount+0xbe/0x150 [ 350.537899] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 350.542918] do_syscall_64+0x1b9/0x820 [ 350.546801] ? finish_task_switch+0x1d3/0x870 [ 350.551297] ? syscall_return_slowpath+0x5e0/0x5e0 [ 350.556229] ? syscall_return_slowpath+0x31d/0x5e0 [ 350.561161] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 350.566526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 350.571375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 350.576560] RIP: 0033:0x455ab9 [ 350.579736] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.599096] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.606804] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 350.614073] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 00:05:50 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x1, 0x200000) fstat(r0, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffa, r2}) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x122) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth0\x00', 0x59) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) write$binfmt_misc(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="00010000"], 0x4) 00:05:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000002a00000027000000000000179500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000001c0)={0x823c, 0x4, 0x8, 0x1, 0x1000, 0x4, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r3, 0x5}, 0x8) [ 350.621338] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 350.628601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 350.635865] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000003 00:05:50 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000095, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:50 executing program 3 (fault-call:8 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:50 executing program 7: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x4, &(0x7f0000000240)="0047fc2f07d82c99240970") readahead(r0, 0x10000, 0x6) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x8864, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 00:05:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 350.914929] FAULT_INJECTION: forcing a failure. [ 350.914929] name failslab, interval 1, probability 0, space 0, times 0 [ 350.926320] CPU: 1 PID: 24290 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 350.933673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.943017] Call Trace: [ 350.945605] dump_stack+0x1c9/0x2b4 [ 350.949241] ? dump_stack_print_info.cold.2+0x52/0x52 [ 350.954440] ? lock_downgrade+0x8f0/0x8f0 [ 350.958598] should_fail.cold.4+0xa/0x1a [ 350.962663] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 350.967767] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 350.972182] ? is_bpf_text_address+0xd7/0x170 [ 350.976687] ? find_held_lock+0x36/0x1c0 [ 350.980766] ? check_same_owner+0x340/0x340 [ 350.985091] ? kasan_slab_free+0xe/0x10 [ 350.989066] ? kmem_cache_free+0x86/0x2d0 [ 350.993213] ? putname+0xf2/0x130 [ 350.996666] ? rcu_note_context_switch+0x730/0x730 [ 351.001595] ? ksys_mount+0x12d/0x140 [ 351.005396] ? __x64_sys_mount+0xbe/0x150 [ 351.009549] __should_failslab+0x124/0x180 00:05:51 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000002000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000386000)=""/195}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x1040000080080, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000140)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r0, 0xfffffc61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setpipe(r2, 0x407, 0x2) close(r0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r2) [ 351.013793] should_failslab+0x9/0x14 [ 351.017594] kmem_cache_alloc+0x2af/0x760 [ 351.021751] ? kasan_check_write+0x14/0x20 [ 351.025990] ? do_raw_spin_lock+0xc1/0x200 [ 351.030233] alloc_vfsmnt+0xe8/0x9f0 [ 351.033956] ? mnt_free_id.isra.27+0x60/0x60 [ 351.038371] ? kasan_check_read+0x11/0x20 [ 351.042520] ? graph_lock+0x170/0x170 [ 351.046317] ? rcu_pm_notify+0xc0/0xc0 [ 351.050205] ? putname+0xf2/0x130 [ 351.053669] ? find_held_lock+0x36/0x1c0 [ 351.057739] ? lock_downgrade+0x8f0/0x8f0 00:05:51 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xe19, 0x800) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000000c0)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x4, 0x5, 0x100}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:51 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xf00000000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000220001000000000000000000040000001000110008000000", @ANYRES32], 0x20}, 0x1}, 0x0) syncfs(r0) 00:05:51 executing program 4: socketpair(0xa, 0x4, 0x20, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x8}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x7060}, &(0x7f0000000240)=0x8) r2 = socket$nl_generic(0xa, 0x3, 0x10) poll(&(0x7f0000000100)=[{r2, 0x84}], 0x1, 0xfffffffffffffe00) mount$9p_xen(&(0x7f0000000000)='@$\'cgroupppp1nodevvboxnet1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x3820010, &(0x7f00000000c0)={'trans=xen,', {[{@aname={'aname', 0x3d}, 0x2c}, {@privport='privport', 0x2c}]}}) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x6, &(0x7f0000001000)={0x14, 0x0, 0x1, 0x24}, 0x10) [ 351.061890] ? module_unload_free+0x5d0/0x5d0 [ 351.066386] ? lock_release+0xa30/0xa30 [ 351.070363] ? mpi_free.cold.1+0x19/0x19 [ 351.074434] vfs_kern_mount.part.34+0x90/0x4e0 [ 351.079024] ? may_umount+0xb0/0xb0 [ 351.082651] ? _raw_read_unlock+0x22/0x30 [ 351.086801] ? __get_fs_type+0x97/0xc0 [ 351.090691] do_mount+0x581/0x30e0 [ 351.094242] ? copy_mount_string+0x40/0x40 [ 351.098485] ? copy_mount_options+0x5f/0x380 [ 351.102910] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.107933] ? kmem_cache_alloc_trace+0x616/0x780 [ 351.112789] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.118325] ? _copy_from_user+0xdf/0x150 [ 351.122475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.128010] ? copy_mount_options+0x285/0x380 [ 351.132514] ksys_mount+0x12d/0x140 [ 351.136145] __x64_sys_mount+0xbe/0x150 [ 351.140123] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.145142] do_syscall_64+0x1b9/0x820 [ 351.149024] ? finish_task_switch+0x1d3/0x870 [ 351.153520] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.158450] ? syscall_return_slowpath+0x31d/0x5e0 [ 351.163385] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 351.168759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.173612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.178798] RIP: 0033:0x455ab9 [ 351.181977] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.201338] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.209045] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:05:51 executing program 3 (fault-call:8 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 351.216308] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 351.223569] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 351.230834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 351.238098] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000004 00:05:51 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) sendmsg$rds(r1, &(0x7f0000000b00)={&(0x7f0000000180)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000002000)=""/4096, 0x1000}], 0x1, &(0x7f0000000a00)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xfffffffffffffffb}, {&(0x7f0000000240)=""/112, 0x70}, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/38, 0x26}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/136, 0x88}], 0x5, 0x2, 0x401}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/112, 0x70}, &(0x7f0000000800), 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0xdd04, 0x7}, {&(0x7f0000000840)=""/218, 0xda}, &(0x7f00000009c0)=[{&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/4096, 0x1000}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/46, 0x2e}], 0x4, 0x4, 0x80000001}}], 0xd8, 0x1}, 0x80) umount2(&(0x7f0000000040)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b000000000066ce656d316e6f646576656d3100000000000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b73797374656dcc6370757365746367726f7570246367726f75701500000000"], 0x90) 00:05:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 351.458854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor7'. 00:05:51 executing program 5: r0 = socket$inet6(0xa, 0x5, 0xf9) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000080)=""/138, &(0x7f0000000140)=0x8a) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) userfaultfd(0x80800) ioctl(r0, 0x81204101, &(0x7f0000001f64)) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x2) [ 351.540019] FAULT_INJECTION: forcing a failure. [ 351.540019] name failslab, interval 1, probability 0, space 0, times 0 [ 351.551327] CPU: 1 PID: 24319 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 351.558683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.568033] Call Trace: [ 351.570631] dump_stack+0x1c9/0x2b4 [ 351.574276] ? dump_stack_print_info.cold.2+0x52/0x52 [ 351.579481] ? lock_downgrade+0x8f0/0x8f0 [ 351.583642] should_fail.cold.4+0xa/0x1a [ 351.587721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 351.592835] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 351.597259] ? is_bpf_text_address+0xd7/0x170 [ 351.601769] ? find_held_lock+0x36/0x1c0 [ 351.605855] ? check_same_owner+0x340/0x340 [ 351.610183] ? kasan_slab_free+0xe/0x10 [ 351.614157] ? kmem_cache_free+0x86/0x2d0 [ 351.618305] ? putname+0xf2/0x130 [ 351.621765] ? rcu_note_context_switch+0x730/0x730 [ 351.626696] ? ksys_mount+0x12d/0x140 [ 351.630501] ? __x64_sys_mount+0xbe/0x150 [ 351.634655] __should_failslab+0x124/0x180 [ 351.638897] should_failslab+0x9/0x14 [ 351.642699] kmem_cache_alloc+0x2af/0x760 [ 351.646852] ? kasan_check_write+0x14/0x20 [ 351.651088] ? do_raw_spin_lock+0xc1/0x200 [ 351.655332] alloc_vfsmnt+0xe8/0x9f0 [ 351.659046] ? mnt_free_id.isra.27+0x60/0x60 [ 351.663458] ? kasan_check_read+0x11/0x20 [ 351.667609] ? graph_lock+0x170/0x170 [ 351.671410] ? rcu_pm_notify+0xc0/0xc0 [ 351.675301] ? putname+0xf2/0x130 [ 351.678766] ? find_held_lock+0x36/0x1c0 [ 351.682844] ? lock_downgrade+0x8f0/0x8f0 [ 351.686997] ? module_unload_free+0x5d0/0x5d0 [ 351.691502] ? lock_release+0xa30/0xa30 [ 351.695484] ? mpi_free.cold.1+0x19/0x19 [ 351.699555] vfs_kern_mount.part.34+0x90/0x4e0 [ 351.704144] ? may_umount+0xb0/0xb0 [ 351.707774] ? _raw_read_unlock+0x22/0x30 [ 351.711920] ? __get_fs_type+0x97/0xc0 [ 351.715811] do_mount+0x581/0x30e0 [ 351.719347] ? do_raw_spin_unlock+0xa7/0x2f0 [ 351.723760] ? copy_mount_string+0x40/0x40 [ 351.727992] ? copy_mount_options+0x5f/0x380 [ 351.732396] ? rcu_read_lock_sched_held+0x108/0x120 [ 351.737415] ? kmem_cache_alloc_trace+0x616/0x780 [ 351.742261] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 351.746944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor7'. [ 351.747797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.747814] ? copy_mount_options+0x285/0x380 [ 351.747835] ksys_mount+0x12d/0x140 [ 351.747851] __x64_sys_mount+0xbe/0x150 [ 351.747871] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 351.778899] do_syscall_64+0x1b9/0x820 [ 351.782791] ? finish_task_switch+0x1d3/0x870 00:05:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}) [ 351.787287] ? syscall_return_slowpath+0x5e0/0x5e0 [ 351.792219] ? syscall_return_slowpath+0x31d/0x5e0 [ 351.797156] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 351.802524] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 351.807368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 351.812548] RIP: 0033:0x455ab9 [ 351.815732] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 351.835071] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.842775] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 351.842784] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 351.842793] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 351.842802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 351.842811] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000005 00:05:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c9acc9d082f7bcdec844f667da0867d08d4154004997e317b7917a4383b3899c40e01fd318d8fa6498d0346aee4be23b680232b89735405d42f86216555ea1bf5cf53f0cb979b33d50ae62a3c469e6d8135e780d5ec9149acb505388e6db79a90091c3d8ced63129dd65fbe69732c58c0ce5932d735bb7682a184aecfeeb50aebbf1518633a8ce8a1bf", 0xf2, 0x4000004, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) shutdown(r0, 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 00:05:51 executing program 3 (fault-call:8 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:52 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x4000003) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x1) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') ioctl$TCGETS(r2, 0x5401, &(0x7f0000000100)) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000011, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x14) close(r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') close(r1) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) 00:05:52 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") prctl$intptr(0x23, 0xd) recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/105, 0x69}], 0x4, &(0x7f0000000540)=""/243, 0xf3, 0xad0c}, 0x453}, {{&(0x7f0000000640)=@ipx, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/136, 0x88}, {&(0x7f0000000800)=""/188, 0xbc}], 0x3, &(0x7f0000000900)=""/30, 0x1e, 0x10000}, 0x9}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000940)=""/226, 0xe2}, {&(0x7f0000000a40)=""/118, 0x76}, {&(0x7f0000000ac0)=""/179, 0xb3}, {&(0x7f0000000b80)=""/79, 0x4f}, {&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f0000000d00)=""/175, 0xaf}, {&(0x7f0000000dc0)=""/233, 0xe9}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/158, 0x9e}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0xa, &(0x7f0000002080)=""/5, 0x5, 0xff}, 0x4}, {{&(0x7f00000020c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002140)=""/82, 0x52}, {&(0x7f00000021c0)=""/119, 0x77}, {&(0x7f0000002240)=""/29, 0x1d}, {&(0x7f0000002280)=""/185, 0xb9}, {&(0x7f0000002340)=""/194, 0xc2}], 0x5, &(0x7f00000024c0)=""/152, 0x98, 0x4}, 0x40}, {{&(0x7f0000002580)=@ax25, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002600)=""/124, 0x7c}, {&(0x7f0000002680)=""/34, 0x22}, {&(0x7f00000026c0)=""/120, 0x78}, {&(0x7f0000002740)=""/70, 0x46}, {&(0x7f00000027c0)=""/151, 0x97}, {&(0x7f0000002880)=""/51, 0x33}, {&(0x7f00000028c0)=""/79, 0x4f}, {&(0x7f0000002940)=""/62, 0x3e}, {&(0x7f0000002980)}, {&(0x7f00000029c0)=""/251, 0xfb}], 0xa, &(0x7f0000002b80)=""/89, 0x59, 0xfffffffffffffffb}, 0x9}, {{&(0x7f0000002c00)=@can, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/2, 0x2}], 0x1, &(0x7f0000002d00)=""/4, 0x4, 0x3}, 0x20}], 0x6, 0x20, 0x0) accept4$llc(r1, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000002f00)=0x10, 0x800) openat$mixer(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/mixer\x00', 0x81, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x0) 00:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = memfd_create(&(0x7f0000000000)='user\x00', 0x1) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x1ff, 0x1}) close(r1) 00:05:52 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) write$FUSE_STATFS(r1, &(0x7f0000000080)={0x60, 0x0, 0x3, {{0x5, 0x5, 0xfffffffffffffffb, 0x1, 0x7, 0x100, 0x7, 0x100000000}}}, 0x60) socket$bt_bnep(0x1f, 0x3, 0x4) sendfile(r0, r0, &(0x7f0000000040), 0x1) 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 352.227421] FAULT_INJECTION: forcing a failure. [ 352.227421] name failslab, interval 1, probability 0, space 0, times 0 [ 352.238698] CPU: 1 PID: 24356 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 352.246059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.255408] Call Trace: [ 352.258005] dump_stack+0x1c9/0x2b4 [ 352.261642] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.266850] ? find_held_lock+0x36/0x1c0 [ 352.270926] should_fail.cold.4+0xa/0x1a [ 352.275004] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 352.280119] ? kasan_check_read+0x11/0x20 [ 352.284272] ? rcu_pm_notify+0xc0/0xc0 [ 352.288175] ? find_held_lock+0x36/0x1c0 [ 352.292261] ? check_same_owner+0x340/0x340 [ 352.296595] ? rcu_note_context_switch+0x730/0x730 [ 352.301537] __should_failslab+0x124/0x180 [ 352.305782] should_failslab+0x9/0x14 [ 352.309593] kmem_cache_alloc_trace+0x2cb/0x780 [ 352.314278] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.319828] v9fs_mount+0x61/0x900 [ 352.323383] mount_fs+0xae/0x328 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) [ 352.326758] vfs_kern_mount.part.34+0xdc/0x4e0 [ 352.331346] ? may_umount+0xb0/0xb0 [ 352.334985] ? _raw_read_unlock+0x22/0x30 [ 352.339137] ? __get_fs_type+0x97/0xc0 [ 352.343382] do_mount+0x581/0x30e0 [ 352.346932] ? copy_mount_string+0x40/0x40 [ 352.351182] ? copy_mount_options+0x5f/0x380 [ 352.355601] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.360628] ? kmem_cache_alloc_trace+0x616/0x780 [ 352.365485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 352.371030] ? _copy_from_user+0xdf/0x150 [ 352.375192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.380737] ? copy_mount_options+0x285/0x380 [ 352.385239] ksys_mount+0x12d/0x140 [ 352.388877] __x64_sys_mount+0xbe/0x150 [ 352.392865] do_syscall_64+0x1b9/0x820 [ 352.396766] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.401700] ? syscall_return_slowpath+0x31d/0x5e0 [ 352.406637] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.412017] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.416873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.422058] RIP: 0033:0x455ab9 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}) [ 352.425242] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.444611] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.452323] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 352.459587] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 352.466857] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 352.474125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 352.481392] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000006 00:05:52 executing program 1: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x5011, r0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) ioctl$TIOCCBRK(r0, 0x5428) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ftruncate(r0, 0x200000) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x500) userfaultfd(0x0) 00:05:52 executing program 3 (fault-call:8 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:52 executing program 4: r0 = socket$inet6(0xa, 0x9, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$setflags(r0, 0x2, 0x0) 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 352.718424] FAULT_INJECTION: forcing a failure. [ 352.718424] name failslab, interval 1, probability 0, space 0, times 0 [ 352.729793] CPU: 1 PID: 24409 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 352.737148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.746496] Call Trace: [ 352.749086] dump_stack+0x1c9/0x2b4 [ 352.752728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 352.757939] should_fail.cold.4+0xa/0x1a [ 352.762004] ? fault_create_debugfs_attr+0x1f0/0x1f0 00:05:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) getsockname$llc(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f00000013c0), 0x293, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0xc8}], 0x1}}], 0x40000000000015f, 0x0, 0x0) 00:05:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:05:52 executing program 0: socketpair(0x2, 0x3, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000080)={0xfffffffffffffff7, 0xffffffff, 0x5, 0x1, 0x7, 0x62544aed}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 352.767114] ? lock_downgrade+0x8f0/0x8f0 [ 352.771268] ? find_held_lock+0x36/0x1c0 [ 352.775355] ? check_same_owner+0x340/0x340 [ 352.779672] ? unwind_get_return_address+0x61/0xa0 [ 352.784601] ? rcu_note_context_switch+0x730/0x730 [ 352.789540] __should_failslab+0x124/0x180 [ 352.793785] should_failslab+0x9/0x14 [ 352.797588] __kmalloc_track_caller+0x2c4/0x760 [ 352.802261] ? save_stack+0xa9/0xd0 [ 352.805897] ? save_stack+0x43/0xd0 [ 352.809531] ? kasan_kmalloc+0xc4/0xe0 [ 352.813424] ? kmem_cache_alloc_trace+0x152/0x780 [ 352.818277] ? mount_fs+0xae/0x328 [ 352.821823] ? v9fs_session_init+0xdd/0x1a80 [ 352.826244] kstrdup+0x39/0x70 [ 352.829445] v9fs_session_init+0xdd/0x1a80 [ 352.833690] ? find_held_lock+0x36/0x1c0 [ 352.837770] ? v9fs_show_options+0x7e0/0x7e0 [ 352.842188] ? kasan_check_read+0x11/0x20 [ 352.846339] ? rcu_is_watching+0x8c/0x150 [ 352.850491] ? rcu_pm_notify+0xc0/0xc0 [ 352.854695] ? v9fs_mount+0x61/0x900 [ 352.858416] ? rcu_read_lock_sched_held+0x108/0x120 [ 352.863437] ? kmem_cache_alloc_trace+0x616/0x780 [ 352.868292] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 352.873840] v9fs_mount+0x7c/0x900 [ 352.877394] mount_fs+0xae/0x328 [ 352.880775] vfs_kern_mount.part.34+0xdc/0x4e0 [ 352.885366] ? may_umount+0xb0/0xb0 [ 352.889000] ? _raw_read_unlock+0x22/0x30 [ 352.893151] ? __get_fs_type+0x97/0xc0 [ 352.897049] do_mount+0x581/0x30e0 [ 352.900594] ? interrupt_entry+0xb1/0xf0 [ 352.904665] ? copy_mount_string+0x40/0x40 [ 352.908915] ? retint_kernel+0x10/0x10 [ 352.912810] ? copy_mount_options+0x213/0x380 [ 352.917312] ? write_comp_data+0x6c/0x70 [ 352.921378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.926920] ? copy_mount_options+0x285/0x380 [ 352.931425] ksys_mount+0x12d/0x140 [ 352.935053] __x64_sys_mount+0xbe/0x150 [ 352.939031] do_syscall_64+0x1b9/0x820 [ 352.942917] ? finish_task_switch+0x1d3/0x870 [ 352.947420] ? syscall_return_slowpath+0x5e0/0x5e0 [ 352.952355] ? syscall_return_slowpath+0x31d/0x5e0 [ 352.957297] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 352.962670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 352.967520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.972710] RIP: 0033:0x455ab9 [ 352.975894] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.995231] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.002947] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 353.010214] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 353.017654] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 353.024924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 353.032194] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000007 00:05:53 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000022b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffc}) syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') 00:05:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 00:05:53 executing program 3 (fault-call:8 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:53 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, &(0x7f0000000180)) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f760070") ftruncate(r0, 0xc3fb) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100000000000000, 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') 00:05:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(seed-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="b7f2288a933d66593ae164c990a0028e", 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101400, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.stat\x00', 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x9009}], 0x34, &(0x7f0000001400)=""/123, 0x2000147b}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:05:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda={0x66646185}, @fd={0x66642a85}, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000300)={r2}) acct(&(0x7f0000000340)='./file0\x00') mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x1110, r0, 0x0) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1779, 0x123180) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000200)) 00:05:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = memfd_create(&(0x7f00000002c0)="766d6e65743176626f786e657431242573656c696e7578f52e6264657600", 0x0) write(r2, &(0x7f0000000140)="e7c781ca0dfcdae5", 0x8) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)={{0x77359400}, {0x0, 0x7530}}, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x0) [ 353.228879] FAULT_INJECTION: forcing a failure. [ 353.228879] name failslab, interval 1, probability 0, space 0, times 0 [ 353.240237] CPU: 1 PID: 24452 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 353.248206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.257553] Call Trace: [ 353.260154] dump_stack+0x1c9/0x2b4 [ 353.263790] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.268986] ? __save_stack_trace+0x8d/0xf0 [ 353.273319] should_fail.cold.4+0xa/0x1a [ 353.277386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.282491] ? save_stack+0x43/0xd0 [ 353.286121] ? kasan_kmalloc+0xc4/0xe0 [ 353.290011] ? __kmalloc_track_caller+0x14a/0x760 [ 353.294857] ? kstrdup+0x39/0x70 [ 353.298223] ? v9fs_session_init+0xdd/0x1a80 [ 353.302626] ? v9fs_mount+0x7c/0x900 [ 353.306342] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 353.311104] ? do_mount+0x581/0x30e0 [ 353.314825] ? ksys_mount+0x12d/0x140 [ 353.318630] ? __x64_sys_mount+0xbe/0x150 [ 353.322784] ? do_syscall_64+0x1b9/0x820 00:05:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x4) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400800, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0xff}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) [ 353.326851] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.332221] ? find_held_lock+0x36/0x1c0 [ 353.336304] ? check_same_owner+0x340/0x340 [ 353.340628] ? unwind_get_return_address+0x61/0xa0 [ 353.345565] ? rcu_note_context_switch+0x730/0x730 [ 353.350503] __should_failslab+0x124/0x180 [ 353.354743] should_failslab+0x9/0x14 [ 353.358540] __kmalloc_track_caller+0x2c4/0x760 [ 353.363209] ? save_stack+0xa9/0xd0 [ 353.366829] ? save_stack+0x43/0xd0 [ 353.370437] ? kasan_kmalloc+0xc4/0xe0 [ 353.374311] ? kmem_cache_alloc_trace+0x152/0x780 [ 353.379157] ? v9fs_session_init+0x115/0x1a80 [ 353.383661] kstrdup+0x39/0x70 [ 353.386862] v9fs_session_init+0x115/0x1a80 [ 353.391199] ? find_held_lock+0x36/0x1c0 [ 353.395282] ? v9fs_show_options+0x7e0/0x7e0 [ 353.399688] ? kasan_check_read+0x11/0x20 [ 353.403828] ? rcu_is_watching+0x8c/0x150 [ 353.407863] binder: 24453:24458 transaction failed 29189/-22, size 0-0 line 2852 [ 353.407978] ? rcu_pm_notify+0xc0/0xc0 [ 353.415856] binder: 24453:24458 ERROR: BC_REGISTER_LOOPER called without request [ 353.419364] ? v9fs_mount+0x61/0x900 [ 353.419381] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.419398] ? kmem_cache_alloc_trace+0x616/0x780 [ 353.419420] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 353.419437] v9fs_mount+0x7c/0x900 [ 353.419457] mount_fs+0xae/0x328 [ 353.419476] vfs_kern_mount.part.34+0xdc/0x4e0 [ 353.429009] binder: 24453:24458 got reply transaction with no transaction stack [ 353.430687] ? may_umount+0xb0/0xb0 [ 353.430705] ? _raw_read_unlock+0x22/0x30 [ 353.430719] ? __get_fs_type+0x97/0xc0 [ 353.430739] do_mount+0x581/0x30e0 [ 353.430759] ? copy_mount_string+0x40/0x40 [ 353.430782] ? copy_mount_options+0x5f/0x380 [ 353.430799] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.430815] ? kmem_cache_alloc_trace+0x616/0x780 [ 353.430834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 353.430850] ? _copy_from_user+0xdf/0x150 [ 353.430869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.430882] ? copy_mount_options+0x285/0x380 [ 353.430900] ksys_mount+0x12d/0x140 [ 353.435930] binder: 24453:24458 transaction failed 29201/-71, size 80-8 line 2759 00:05:53 executing program 3 (fault-call:8 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 353.440716] __x64_sys_mount+0xbe/0x150 [ 353.440733] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 353.440756] do_syscall_64+0x1b9/0x820 [ 353.467341] binder_alloc: binder_alloc_mmap_handler: 24453 20001000-20004000 already mapped failed -16 [ 353.468729] ? finish_task_switch+0x1d3/0x870 [ 353.468749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.468766] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.468788] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.468807] ? trace_hardirqs_off_thunk+0x1a/0x1c 00:05:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x56649db9, 0x3f, 0x3}) r2 = dup2(r0, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0xc018ae85, &(0x7f0000000100)) [ 353.468830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.468840] RIP: 0033:0x455ab9 [ 353.468845] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 [ 353.479110] binder: 24453:24463 transaction failed 29189/-22, size 0-0 line 2852 [ 353.480470] d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d [ 353.486156] binder: 24453:24458 ERROR: BC_REGISTER_LOOPER called without request [ 353.489151] 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.489245] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.494863] binder: 24453:24463 got reply transaction with no transaction stack [ 353.499072] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 353.499081] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 353.499089] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 353.499098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 353.499107] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000008 [ 353.540648] binder: undelivered TRANSACTION_ERROR: 29189 [ 353.543378] binder: 24453:24463 transaction failed 29201/-71, size 80-8 line 2759 [ 353.697114] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.716632] binder: undelivered TRANSACTION_ERROR: 29189 00:05:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0xa000) getsockopt$inet_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000040)=""/153, &(0x7f0000000100)=0x99) writev(r1, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe0064e2305ef000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 00:05:53 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f0000000cc0), &(0x7f0000000d00)=0x0, &(0x7f0000000d40)) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x1, 0x5033, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f00000f9000)=[{&(0x7f0000000080)=""/2560, 0xfffffffffffffd28}], 0x1) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000e00)=""/229) r5 = add_key(&(0x7f0000000f00)='asymmetric\x00', &(0x7f0000000f40)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000f80)="3fe88d6d16df19331983768c00cc2e7de2915b", 0x13, 0x0) r6 = add_key$user(&(0x7f0000001000)='user\x00', &(0x7f0000001040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001080)="4f3f77159e003fb453a5a5d3d963b710f7c92308beab3ce82e2a523240a37047d9714ef4a0c45c94c55861e8360e8bc133dcf8c6a3ff0b3839a6aa49f8510ea31f2e8cd053c1b51373baf034ed380585214fff279077045353f4ce767b4e1a5c7cdbe45c01f453145e7b81d7b59b567c4f8738fbef64b338dd4010d0324317be1c6b8efe8592de7815791d", 0x8b, 0xfffffffffffffffc) r7 = add_key$user(&(0x7f0000001140)='user\x00', &(0x7f0000001180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000011c0)="e56b3b8e9e54daf17b955cdfe87ad2000be45c5b13", 0x15, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001200)={r5, r6, r7}, &(0x7f0000001240)=""/98, 0x62, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x4, 0x80, 0x7, 0x3, 0x6, 0x8, 0x103, 0xb8ae6c72b890aedb, 0xc, 0x0, 0x1, 0x38, 0x2, 0x9, 0x1, 0x3}, [{0x38d960dcea5aca1b, 0x9, 0x8, 0xc, 0x7, 0x10000, 0x4010000000000000, 0x3f}, {0x4b4d189cd5fb45d8, 0x100, 0x32b1, 0x3a03, 0x8, 0x8, 0x5, 0x101}], "84760590d739a768e6e72be4a1918af60ffb0000cd8f493cef", [[]]}, 0x1c9) userfaultfd(0x80000) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0x1ff) readv(r4, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 353.739336] binder: undelivered TRANSACTION_ERROR: 29201 00:05:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) [ 353.823787] FAULT_INJECTION: forcing a failure. [ 353.823787] name failslab, interval 1, probability 0, space 0, times 0 [ 353.835090] CPU: 1 PID: 24488 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 353.842444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.851779] Call Trace: [ 353.854350] dump_stack+0x1c9/0x2b4 [ 353.857965] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.863138] ? __lock_acquire+0x7fc/0x5020 [ 353.867366] should_fail.cold.4+0xa/0x1a [ 353.871413] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.876508] ? find_held_lock+0x36/0x1c0 [ 353.880568] ? check_same_owner+0x340/0x340 [ 353.884872] ? __kernel_text_address+0xd/0x40 [ 353.889347] ? rcu_note_context_switch+0x730/0x730 [ 353.894262] __should_failslab+0x124/0x180 [ 353.898480] should_failslab+0x9/0x14 [ 353.902265] kmem_cache_alloc_trace+0x2cb/0x780 [ 353.906921] ? save_stack+0xa9/0xd0 [ 353.910537] p9_client_create+0x114/0x1770 [ 353.914754] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 353.919489] ? do_mount+0x581/0x30e0 [ 353.923189] ? __x64_sys_mount+0xbe/0x150 [ 353.927317] ? do_syscall_64+0x1b9/0x820 [ 353.931361] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.936711] ? p9_client_read+0xc60/0xc60 [ 353.940841] ? find_held_lock+0x36/0x1c0 [ 353.944896] ? __lockdep_init_map+0x105/0x590 [ 353.949378] ? lockdep_init_map+0x9/0x10 [ 353.953422] ? kasan_check_write+0x14/0x20 [ 353.957639] ? __init_rwsem+0x1cc/0x2a0 [ 353.961596] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 353.966600] ? rcu_read_lock_sched_held+0x108/0x120 [ 353.971624] ? __kmalloc_track_caller+0x5f5/0x760 [ 353.976449] ? save_stack+0xa9/0xd0 [ 353.980062] ? save_stack+0x43/0xd0 [ 353.983672] ? kasan_kmalloc+0xc4/0xe0 [ 353.987540] ? kmem_cache_alloc_trace+0x152/0x780 [ 353.992364] ? memcpy+0x45/0x50 [ 353.995633] v9fs_session_init+0x21a/0x1a80 [ 353.999937] ? find_held_lock+0x36/0x1c0 [ 354.003989] ? v9fs_show_options+0x7e0/0x7e0 [ 354.008388] ? kasan_check_read+0x11/0x20 [ 354.012518] ? rcu_is_watching+0x8c/0x150 [ 354.016655] ? rcu_pm_notify+0xc0/0xc0 [ 354.020527] ? v9fs_mount+0x61/0x900 [ 354.024223] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.029220] ? kmem_cache_alloc_trace+0x616/0x780 [ 354.034048] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 354.039566] v9fs_mount+0x7c/0x900 [ 354.043092] mount_fs+0xae/0x328 [ 354.046444] vfs_kern_mount.part.34+0xdc/0x4e0 [ 354.051013] ? may_umount+0xb0/0xb0 [ 354.054626] ? _raw_read_unlock+0x22/0x30 [ 354.058753] ? __get_fs_type+0x97/0xc0 [ 354.062628] do_mount+0x581/0x30e0 [ 354.066152] ? copy_mount_string+0x40/0x40 [ 354.070373] ? copy_mount_options+0x5f/0x380 [ 354.074764] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.079761] ? kmem_cache_alloc_trace+0x616/0x780 [ 354.084590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.090110] ? copy_mount_options+0x285/0x380 [ 354.094589] ksys_mount+0x12d/0x140 [ 354.098200] __x64_sys_mount+0xbe/0x150 [ 354.102155] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 354.107157] do_syscall_64+0x1b9/0x820 [ 354.111028] ? finish_task_switch+0x1d3/0x870 [ 354.115508] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.120420] ? syscall_return_slowpath+0x31d/0x5e0 [ 354.125334] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.130683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.135517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.140689] RIP: 0033:0x455ab9 [ 354.143855] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.163082] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:05:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) [ 354.170774] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 354.178029] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 354.185279] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 354.192529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 354.199777] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000009 00:05:54 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000018a, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:54 executing program 3 (fault-call:8 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:54 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0x7, 0x8001}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x5, 0x2}, &(0x7f0000000140)=0xc) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) 00:05:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r3, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x53, 0x2}, {{0x77359400}}], 0x30) r4 = syz_open_pts(r0, 0x20201) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000800)={0xfffffffffffffffd, 0x9}) writev(r4, &(0x7f0000003440)=[{&(0x7f0000000040)="fda3", 0x2}], 0x1) 00:05:54 executing program 5: mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./control\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x511040, 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x81000100) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000100)={0x7, 0x3}) creat(&(0x7f00000000c0)='./control/file1\x00', 0x1) eventfd2(0x6, 0x80001) [ 354.416433] FAULT_INJECTION: forcing a failure. [ 354.416433] name failslab, interval 1, probability 0, space 0, times 0 [ 354.427743] CPU: 1 PID: 24516 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 354.435101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.444450] Call Trace: [ 354.447056] dump_stack+0x1c9/0x2b4 [ 354.450695] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.455884] ? unwind_get_return_address+0x61/0xa0 [ 354.460821] should_fail.cold.4+0xa/0x1a 00:05:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x3, {0xa, 0x4e22, 0x3, @empty, 0x6}, r1}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100), r1, 0x0, 0x2, 0x4}}, 0x20) [ 354.464896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.470010] ? save_stack+0xa9/0xd0 [ 354.473648] ? save_stack+0x43/0xd0 [ 354.477280] ? kasan_kmalloc+0xc4/0xe0 [ 354.481175] ? kmem_cache_alloc_trace+0x152/0x780 [ 354.486022] ? v9fs_session_init+0x21a/0x1a80 [ 354.490518] ? v9fs_mount+0x7c/0x900 [ 354.494235] ? mount_fs+0xae/0x328 [ 354.497780] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 354.502543] ? do_mount+0x581/0x30e0 [ 354.506260] ? ksys_mount+0x12d/0x140 [ 354.510069] ? __x64_sys_mount+0xbe/0x150 [ 354.514220] ? do_syscall_64+0x1b9/0x820 [ 354.518284] ? find_held_lock+0x36/0x1c0 [ 354.522368] ? check_same_owner+0x340/0x340 [ 354.526692] ? kasan_check_read+0x11/0x20 [ 354.530843] ? rcu_is_watching+0x8c/0x150 [ 354.534995] ? rcu_note_context_switch+0x730/0x730 [ 354.539928] ? rcu_pm_notify+0xc0/0xc0 [ 354.543824] __should_failslab+0x124/0x180 [ 354.548065] should_failslab+0x9/0x14 [ 354.551865] kmem_cache_alloc_trace+0x2cb/0x780 [ 354.556535] ? kmem_cache_alloc_trace+0x616/0x780 [ 354.561377] ? __lockdep_init_map+0x105/0x590 [ 354.565885] p9_idpool_create+0x42/0x190 [ 354.569949] p9_client_create+0x286/0x1770 [ 354.574178] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 354.578926] ? do_mount+0x581/0x30e0 [ 354.582638] ? __x64_sys_mount+0xbe/0x150 [ 354.586786] ? do_syscall_64+0x1b9/0x820 [ 354.590847] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.596218] ? p9_client_read+0xc60/0xc60 [ 354.600367] ? find_held_lock+0x36/0x1c0 [ 354.604441] ? __lockdep_init_map+0x105/0x590 [ 354.608945] ? kasan_check_write+0x14/0x20 [ 354.613176] ? __init_rwsem+0x1cc/0x2a0 [ 354.617149] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 354.622169] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.627183] ? __kmalloc_track_caller+0x5f5/0x760 [ 354.632025] ? save_stack+0xa9/0xd0 [ 354.635651] ? save_stack+0x43/0xd0 [ 354.639274] ? kasan_kmalloc+0xc4/0xe0 [ 354.643160] ? kmem_cache_alloc_trace+0x152/0x780 [ 354.647997] ? memcpy+0x45/0x50 [ 354.651271] v9fs_session_init+0x21a/0x1a80 [ 354.655584] ? find_held_lock+0x36/0x1c0 [ 354.659659] ? v9fs_show_options+0x7e0/0x7e0 [ 354.664069] ? kasan_check_read+0x11/0x20 [ 354.668205] ? rcu_is_watching+0x8c/0x150 [ 354.672334] ? rcu_pm_notify+0xc0/0xc0 [ 354.676203] ? v9fs_mount+0x61/0x900 [ 354.679898] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.684896] ? kmem_cache_alloc_trace+0x616/0x780 [ 354.689721] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 354.695240] v9fs_mount+0x7c/0x900 [ 354.698774] mount_fs+0xae/0x328 [ 354.702123] vfs_kern_mount.part.34+0xdc/0x4e0 [ 354.706682] ? may_umount+0xb0/0xb0 [ 354.710299] ? _raw_read_unlock+0x22/0x30 [ 354.714429] ? __get_fs_type+0x97/0xc0 [ 354.718312] do_mount+0x581/0x30e0 [ 354.721838] ? copy_mount_string+0x40/0x40 [ 354.726057] ? copy_mount_options+0x5f/0x380 [ 354.730450] ? rcu_read_lock_sched_held+0x108/0x120 [ 354.735450] ? kmem_cache_alloc_trace+0x616/0x780 [ 354.740283] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 354.745816] ? _copy_from_user+0xdf/0x150 [ 354.749972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.755510] ? copy_mount_options+0x285/0x380 [ 354.760014] ksys_mount+0x12d/0x140 [ 354.763649] __x64_sys_mount+0xbe/0x150 [ 354.767627] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 354.772648] do_syscall_64+0x1b9/0x820 [ 354.776536] ? finish_task_switch+0x1d3/0x870 [ 354.781034] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.785967] ? syscall_return_slowpath+0x31d/0x5e0 [ 354.790903] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.796272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.801122] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.806308] RIP: 0033:0x455ab9 00:05:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f00000000008000028000007a0a8bf92c969b95dc5f98"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) r0 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 00:05:54 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x10000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000ff0300008583000000000000010000000000000006000000000000000300000000000000ffffffff000000000500000000000000000400000000000008000000000000000000000000000000010000000100000000000000000000000800000000000000aa6e0000000000000000ea00000000000600000000000000020000000000000001000000000000000000000000000000bd000000000000000100008000000000"]) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) fcntl$setown(r0, 0x8, r3) readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:54 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2300000007ffff160065ce74e3a427b300003065265855d88b5a42e77562e4e7426d31"], 0x23) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$dupfd(r1, 0x406, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000480)={0x3, 0x9}) write$FUSE_ATTR(r5, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x5, {0xc10, 0x0, 0x0, {0x4, 0x4, 0x800, 0x3, 0x400, 0x2, 0x4534, 0x8, 0x8, 0x7, 0x0, r6, r7, 0x9, 0x55}}}, 0x78) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0xce, 0x1]}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}]}}) 00:05:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) [ 354.809490] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.828844] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.836556] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 354.843820] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 354.851088] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 354.858803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 354.866072] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000a 00:05:54 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f81702e6e00000000008e746d04000000000000", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002840)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000002880)={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80, [], 0x14}, @local={0xfe, 0x80, [], 0xaa}, 0x2, 0x8, 0x8, 0x100, 0xb1a, 0x80201, r3}) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) ioctl$TIOCNXCL(r2, 0x540d) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) sendfile(r1, r4, &(0x7f00000000c0), 0x0) [ 354.913549] 9pnet: p9_errstr2errno: server reported unknown error eÎtã¤'³ 00:05:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) [ 354.958159] 9pnet: p9_errstr2errno: server reported unknown error eÎtã¤'³ 00:05:55 executing program 7: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x400005, 0x353b) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x2000000000005460, &(0x7f00000000c0)) 00:05:55 executing program 3 (fault-call:8 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:55 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x8777, 0x100000000, 0x6, 0xff, 0xcee7, 0xfffffffffffffffe, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x81, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}}, 0x9, 0x0, 0x8000, 0x6, 0x7}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000180)}, &(0x7f0000000200)=0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='!\x00'}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e21, 0xff, @mcast1={0xff, 0x1, [], 0x1}, 0x41d}}, 0x8, 0xfffffffffffffff7, 0x4, 0x6}, &(0x7f0000000180)=0x98) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000300)={0x8000, 0x14, [0x9, 0xfff, 0x5, 0x5, 0x40000000000]}) 00:05:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000200)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0), &(0x7f0000000100)={0x4}, 0x8) read(r0, &(0x7f0000000140)=""/143, 0x8f) [ 355.184960] FAULT_INJECTION: forcing a failure. [ 355.184960] name failslab, interval 1, probability 0, space 0, times 0 [ 355.196304] CPU: 0 PID: 24565 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 355.203665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.213015] Call Trace: [ 355.215607] dump_stack+0x1c9/0x2b4 [ 355.219242] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.224439] ? __save_stack_trace+0x8d/0xf0 [ 355.228769] should_fail.cold.4+0xa/0x1a 00:05:55 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000019c, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x10000000004, 0x401) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 00:05:55 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getegid() r4 = fanotify_init(0x3a, 0x80000) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x228800) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x2}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000800)="b888008ec8660f3a1685f6ff123e0f01d1260fc7183efff70f01c80f320f18d90f20196766c7442400420000006766c7442402ea4635856766c744240600000000670f011c24", 0x46}], 0xaaaaaf5, 0x0, &(0x7f00000008c0), 0x0) 00:05:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) 00:05:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r0, 0x6004}, {r0, 0x20}, {r0}, {r0, 0x244b}, {r0, 0x402c}, {r0, 0x40}, {r0, 0x1088}, {r0, 0x80}, {r0}], 0xa, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)={0x1}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000040)=""/16) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) munlockall() ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000200)) [ 355.232841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.237954] ? save_stack+0x43/0xd0 [ 355.241585] ? kasan_kmalloc+0xc4/0xe0 [ 355.245474] ? __kmalloc_track_caller+0x14a/0x760 [ 355.250318] ? kstrdup+0x39/0x70 [ 355.253693] ? p9_client_create+0x48f/0x1770 [ 355.258106] ? v9fs_session_init+0x21a/0x1a80 [ 355.262605] ? mount_fs+0xae/0x328 [ 355.266147] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 355.270913] ? do_mount+0x581/0x30e0 [ 355.274633] ? ksys_mount+0x12d/0x140 [ 355.278438] ? __x64_sys_mount+0xbe/0x150 [ 355.282590] ? do_syscall_64+0x1b9/0x820 [ 355.286661] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.292039] ? find_held_lock+0x36/0x1c0 [ 355.296121] ? check_same_owner+0x340/0x340 [ 355.300445] ? rcu_note_context_switch+0x730/0x730 [ 355.305378] __should_failslab+0x124/0x180 [ 355.309612] should_failslab+0x9/0x14 [ 355.313411] __kmalloc+0x2c8/0x760 [ 355.316955] ? match_wildcard+0x3c0/0x3c0 [ 355.321106] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.326121] ? match_strdup+0x5e/0xa0 [ 355.329926] match_strdup+0x5e/0xa0 00:05:55 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') fadvise64(r1, 0x0, 0x3, 0x3) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 355.333557] p9_client_create+0x6c7/0x1770 [ 355.337801] ? p9_client_read+0xc60/0xc60 [ 355.341953] ? find_held_lock+0x36/0x1c0 [ 355.346032] ? __lockdep_init_map+0x105/0x590 [ 355.350532] ? kasan_check_write+0x14/0x20 [ 355.354760] ? __init_rwsem+0x1cc/0x2a0 [ 355.358717] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 355.363726] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.368734] ? __kmalloc_track_caller+0x5f5/0x760 [ 355.373555] ? save_stack+0xa9/0xd0 [ 355.377166] ? save_stack+0x43/0xd0 [ 355.380773] ? kasan_kmalloc+0xc4/0xe0 [ 355.384642] ? kmem_cache_alloc_trace+0x152/0x780 [ 355.389464] ? memcpy+0x45/0x50 [ 355.392726] v9fs_session_init+0x21a/0x1a80 [ 355.397036] ? find_held_lock+0x36/0x1c0 [ 355.401085] ? v9fs_show_options+0x7e0/0x7e0 [ 355.405476] ? kasan_check_read+0x11/0x20 [ 355.409605] ? rcu_is_watching+0x8c/0x150 [ 355.413735] ? rcu_pm_notify+0xc0/0xc0 [ 355.417604] ? v9fs_mount+0x61/0x900 [ 355.421300] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.426307] ? kmem_cache_alloc_trace+0x616/0x780 [ 355.431132] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 355.436650] v9fs_mount+0x7c/0x900 [ 355.440182] mount_fs+0xae/0x328 [ 355.443540] vfs_kern_mount.part.34+0xdc/0x4e0 [ 355.448104] ? may_umount+0xb0/0xb0 [ 355.451712] ? _raw_read_unlock+0x22/0x30 [ 355.455839] ? __get_fs_type+0x97/0xc0 [ 355.459710] do_mount+0x581/0x30e0 [ 355.463236] ? copy_mount_string+0x40/0x40 [ 355.467470] ? copy_mount_options+0x5f/0x380 [ 355.471874] ? rcu_read_lock_sched_held+0x108/0x120 [ 355.476876] ? kmem_cache_alloc_trace+0x616/0x780 [ 355.481700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.487219] ? _copy_from_user+0xdf/0x150 [ 355.491351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.496886] ? copy_mount_options+0x285/0x380 [ 355.501385] ksys_mount+0x12d/0x140 [ 355.504991] __x64_sys_mount+0xbe/0x150 [ 355.508948] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.513943] do_syscall_64+0x1b9/0x820 [ 355.517807] ? finish_task_switch+0x1d3/0x870 [ 355.522281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.527190] ? syscall_return_slowpath+0x31d/0x5e0 [ 355.532102] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.537449] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.542273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.547438] RIP: 0033:0x455ab9 [ 355.550602] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.569775] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.577462] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:05:55 executing program 3 (fault-call:8 fault-nth:12): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200002, 0x0) accept$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r2) r4 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'crc32-pclmul\x00'}}) [ 355.584710] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 355.591958] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 355.599204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 355.606454] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000b 00:05:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xccb6, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f0000000000)) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3, 0xc0000) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=unix,', {[{@loose='loose', 0x2c}, {@dfltgid={'dfltgid', 0x3d, r4}, 0x2c}, {@loose='loose', 0x2c}, {@access_any='access=any', 0x2c}, {@noextend='noextend', 0x2c}, {@posixacl='posixacl', 0x2c}, {@privport='privport', 0x2c}, {@dfltuid={'dfltuid', 0x3d, r5}, 0x2c}, {@access_any='access=any', 0x2c}, {@version_u='version=9p2000.u', 0x2c}]}}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000000c0)={0x2, r3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000006, 0x50, r0, 0x0) mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='iso9660\x00', 0x1020, &(0x7f0000000340)) [ 355.929585] FAULT_INJECTION: forcing a failure. [ 355.929585] name failslab, interval 1, probability 0, space 0, times 0 [ 355.940939] CPU: 0 PID: 24599 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 355.948299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.957650] Call Trace: [ 355.960226] dump_stack+0x1c9/0x2b4 [ 355.963846] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.969029] ? __save_stack_trace+0x8d/0xf0 [ 355.973347] should_fail.cold.4+0xa/0x1a [ 355.977395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.982485] ? save_stack+0x43/0xd0 [ 355.986094] ? kasan_kmalloc+0xc4/0xe0 [ 355.989965] ? __kmalloc_track_caller+0x14a/0x760 [ 355.994794] ? kstrdup+0x39/0x70 [ 355.998146] ? p9_client_create+0x48f/0x1770 [ 356.002537] ? v9fs_session_init+0x21a/0x1a80 [ 356.007034] ? mount_fs+0xae/0x328 [ 356.010556] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 356.015293] ? ksys_mount+0x12d/0x140 [ 356.019079] ? __x64_sys_mount+0xbe/0x150 [ 356.023214] ? do_syscall_64+0x1b9/0x820 [ 356.027259] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.032613] ? find_held_lock+0x36/0x1c0 [ 356.036677] ? check_same_owner+0x340/0x340 [ 356.040984] ? rcu_note_context_switch+0x730/0x730 [ 356.045905] __should_failslab+0x124/0x180 [ 356.050126] should_failslab+0x9/0x14 [ 356.053911] __kmalloc+0x2c8/0x760 [ 356.057439] ? match_wildcard+0x3c0/0x3c0 [ 356.061570] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 356.066571] ? match_strdup+0x5e/0xa0 [ 356.070360] match_strdup+0x5e/0xa0 [ 356.073972] p9_client_create+0x6c7/0x1770 [ 356.078196] ? p9_client_read+0xc60/0xc60 [ 356.082330] ? find_held_lock+0x36/0x1c0 [ 356.086389] ? __lockdep_init_map+0x105/0x590 [ 356.090873] ? kasan_check_write+0x14/0x20 [ 356.095091] ? __init_rwsem+0x1cc/0x2a0 [ 356.099049] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 356.104054] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.109053] ? __kmalloc_track_caller+0x5f5/0x760 [ 356.113880] ? save_stack+0xa9/0xd0 [ 356.117492] ? save_stack+0x43/0xd0 [ 356.121103] ? kasan_kmalloc+0xc4/0xe0 [ 356.124975] ? kmem_cache_alloc_trace+0x152/0x780 [ 356.129801] ? memcpy+0x45/0x50 [ 356.133075] v9fs_session_init+0x21a/0x1a80 [ 356.137381] ? find_held_lock+0x36/0x1c0 [ 356.141432] ? v9fs_show_options+0x7e0/0x7e0 [ 356.145831] ? kasan_check_read+0x11/0x20 [ 356.149963] ? rcu_is_watching+0x8c/0x150 [ 356.154092] ? rcu_pm_notify+0xc0/0xc0 [ 356.157968] ? v9fs_mount+0x61/0x900 [ 356.161665] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.166664] ? kmem_cache_alloc_trace+0x616/0x780 [ 356.171494] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.177023] v9fs_mount+0x7c/0x900 [ 356.180646] mount_fs+0xae/0x328 [ 356.183999] vfs_kern_mount.part.34+0xdc/0x4e0 [ 356.188573] ? may_umount+0xb0/0xb0 [ 356.192183] ? _raw_read_unlock+0x22/0x30 [ 356.196316] ? __get_fs_type+0x97/0xc0 [ 356.200189] do_mount+0x581/0x30e0 [ 356.203716] ? copy_mount_string+0x40/0x40 [ 356.207936] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 356.212688] ? retint_kernel+0x10/0x10 [ 356.216566] ? copy_mount_options+0x1a1/0x380 [ 356.221048] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 356.225875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.231405] ? copy_mount_options+0x285/0x380 [ 356.235884] ksys_mount+0x12d/0x140 [ 356.239495] __x64_sys_mount+0xbe/0x150 [ 356.243454] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 356.248454] do_syscall_64+0x1b9/0x820 [ 356.252324] ? finish_task_switch+0x1d3/0x870 [ 356.256806] ? syscall_return_slowpath+0x5e0/0x5e0 [ 356.261718] ? syscall_return_slowpath+0x31d/0x5e0 [ 356.266635] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.271987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.276820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.281991] RIP: 0033:0x455ab9 [ 356.285164] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.304409] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.312102] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 356.319351] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 00:05:56 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:05:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) [ 356.326600] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 356.333848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 356.341097] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000c [ 356.368791] 9pnet: p9_fd_create_unix (24598): problem connecting socket: ./file0: -111 00:05:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="f2d9edb805000000b9064800000f01d9c4e15dd80f0f0766ba2100edc4e2fd21fd670fc76f810f23a88fc90802f366ba4300ec", 0x33}], 0x1, 0x5d, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8}, @flags={0x3, 0x22002}], 0xcb) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x80104592, &(0x7f0000000100)) 00:05:56 executing program 3 (fault-call:8 fault-nth:13): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:56 executing program 1: setrlimit(0x7, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x14000, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x7ff, &(0x7f00000000c0)=0x1) [ 356.423071] 9pnet: p9_fd_create_unix (24598): problem connecting socket: ./file0: -111 00:05:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @rand_addr=0x40}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x40) ioctl(r0, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f762070") ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20000000011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='projid_map\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x401, 0x7}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) fstatfs(r2, &(0x7f0000000200)=""/243) 00:05:56 executing program 4: r0 = socket$inet(0x2, 0x6, 0x8) setsockopt$sock_int(r0, 0x1, 0x8000000009, &(0x7f0000000480)=0x5, 0x4) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000002c0), 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x14b000, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/41, 0x29, 0x816b, &(0x7f00000000c0)={0x0, 0x1c9c380}) accept4$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in=@multicast2=0xe0000002, 0x4e20, 0x100000000, 0x4e23, 0x9, 0xa, 0x80, 0x20, 0xef, r2, r3}, {0xffffffffffffffff, 0x2, 0x6, 0x116f, 0xffffffff, 0x7b, 0x800, 0x4}, {0x100000001, 0x80000001, 0xfffffffffffffffb, 0x2}, 0x4, 0x6e6bc0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d2, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3501, 0x2, 0x0, 0x3ff, 0x5, 0x349, 0x1000}}, 0xe8) [ 356.611452] FAULT_INJECTION: forcing a failure. [ 356.611452] name failslab, interval 1, probability 0, space 0, times 0 [ 356.622795] CPU: 0 PID: 24626 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 356.630151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.639487] Call Trace: [ 356.642065] dump_stack+0x1c9/0x2b4 [ 356.645680] ? dump_stack_print_info.cold.2+0x52/0x52 [ 356.650856] ? is_bpf_text_address+0xd7/0x170 [ 356.655337] ? kernel_text_address+0x79/0xf0 [ 356.659732] should_fail.cold.4+0xa/0x1a [ 356.663782] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 356.668874] ? save_stack+0xa9/0xd0 [ 356.672487] ? find_held_lock+0x36/0x1c0 [ 356.676544] ? check_same_owner+0x340/0x340 [ 356.680851] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 356.685937] ? rcu_note_context_switch+0x730/0x730 [ 356.690854] __should_failslab+0x124/0x180 [ 356.695071] should_failslab+0x9/0x14 [ 356.698855] kmem_cache_alloc_trace+0x2cb/0x780 [ 356.703506] ? kfree+0x111/0x260 [ 356.706857] ? p9_client_create+0x7f9/0x1770 [ 356.711249] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 356.716254] p9_idpool_create+0x42/0x190 [ 356.720297] p9_client_create+0x852/0x1770 [ 356.724520] ? p9_client_read+0xc60/0xc60 [ 356.728648] ? find_held_lock+0x36/0x1c0 [ 356.732703] ? __lockdep_init_map+0x105/0x590 [ 356.737189] ? kasan_check_write+0x14/0x20 [ 356.741407] ? __init_rwsem+0x1cc/0x2a0 [ 356.745363] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 356.750367] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.755367] ? __kmalloc_track_caller+0x5f5/0x760 [ 356.760190] ? save_stack+0xa9/0xd0 [ 356.763802] ? save_stack+0x43/0xd0 [ 356.767411] ? kasan_kmalloc+0xc4/0xe0 [ 356.771281] ? kmem_cache_alloc_trace+0x152/0x780 [ 356.776107] ? memcpy+0x45/0x50 [ 356.779377] v9fs_session_init+0x21a/0x1a80 [ 356.783681] ? find_held_lock+0x36/0x1c0 [ 356.787733] ? v9fs_show_options+0x7e0/0x7e0 [ 356.792128] ? kasan_check_read+0x11/0x20 [ 356.796258] ? rcu_is_watching+0x8c/0x150 [ 356.800387] ? rcu_pm_notify+0xc0/0xc0 [ 356.804264] ? v9fs_mount+0x61/0x900 [ 356.807963] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.812961] ? kmem_cache_alloc_trace+0x616/0x780 [ 356.817789] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 356.823307] v9fs_mount+0x7c/0x900 [ 356.826833] mount_fs+0xae/0x328 [ 356.830185] vfs_kern_mount.part.34+0xdc/0x4e0 [ 356.834751] ? may_umount+0xb0/0xb0 [ 356.838365] ? _raw_read_unlock+0x22/0x30 [ 356.842492] ? __get_fs_type+0x97/0xc0 [ 356.846368] do_mount+0x581/0x30e0 [ 356.849894] ? copy_mount_string+0x40/0x40 [ 356.854121] ? copy_mount_options+0x5f/0x380 [ 356.858513] ? rcu_read_lock_sched_held+0x108/0x120 [ 356.863512] ? kmem_cache_alloc_trace+0x616/0x780 [ 356.868338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.873857] ? _copy_from_user+0xdf/0x150 [ 356.877992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.883511] ? copy_mount_options+0x285/0x380 [ 356.887990] ksys_mount+0x12d/0x140 [ 356.891605] __x64_sys_mount+0xbe/0x150 [ 356.895564] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 356.900562] do_syscall_64+0x1b9/0x820 [ 356.904428] ? finish_task_switch+0x1d3/0x870 [ 356.908907] ? syscall_return_slowpath+0x5e0/0x5e0 [ 356.913819] ? syscall_return_slowpath+0x31d/0x5e0 [ 356.918740] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.924089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.928918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.934086] RIP: 0033:0x455ab9 [ 356.937254] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.956468] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.964156] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 356.971405] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 356.978653] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 356.985904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 356.993156] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000d 00:05:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000044, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 00:05:57 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind(r0, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 00:05:57 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x84000) ioctl$int_out(r0, 0x5461, &(0x7f0000000140)) r1 = inotify_init1(0x0) getsockname$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setregset(0x2, r4, 0xffffffffff600000, &(0x7f0000000100)={&(0x7f0000000140)}) getpeername$inet(r0, &(0x7f0000000040)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) 00:05:57 executing program 3 (fault-call:8 fault-nth:14): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 357.215487] FAULT_INJECTION: forcing a failure. [ 357.215487] name failslab, interval 1, probability 0, space 0, times 0 [ 357.226806] CPU: 0 PID: 24652 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 357.234164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.243512] Call Trace: [ 357.246104] dump_stack+0x1c9/0x2b4 [ 357.249741] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.254950] should_fail.cold.4+0xa/0x1a [ 357.259022] ? fault_create_debugfs_attr+0x1f0/0x1f0 00:05:57 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) mmap(&(0x7f000044a000/0x4000)=nil, 0x4000, 0x0, 0x40010, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0x10) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x44080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x1f, 0x38, &(0x7f0000000080)="b43e5109da4eb3425dfe745269e123036937dd019e5e9b990fd2ae51a71ffe", &(0x7f00000000c0)=""/56, 0x4}, 0x28) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') accept$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x14) syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x22, 0x0) readv(r3, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r3, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:05:57 executing program 7: mknod(&(0x7f0000002980)='./file2\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002a00)='./file2\x00', &(0x7f0000002a40)='fuse\x00', 0x0, &(0x7f0000002a80)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0xf6ffffff00000000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x7, 0x5) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x3ff, @remote={0xfe, 0x80, [], 0xbb}, 0x401}, 0x1c) r2 = memfd_create(&(0x7f0000000080)='*selinux![\x00', 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000007680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/83, 0x53}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/255, 0xff}, {&(0x7f00000007c0)=""/59, 0x3b}, {&(0x7f0000000800)=""/112, 0x70}, {&(0x7f0000000880)=""/207, 0xcf}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/50, 0x32}, {&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000ac0)=""/232, 0xe8}], 0xa, &(0x7f0000000c80)=""/35, 0x23, 0x7}, 0x9}, {{&(0x7f0000000cc0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/164, 0xa4}, {&(0x7f0000000fc0)=""/115, 0x73}, {&(0x7f0000001040)=""/42, 0x2a}, {&(0x7f0000001080)=""/43, 0x2b}], 0x6, &(0x7f0000001140)=""/4096, 0x1000, 0x3}, 0x25ab2edf}, {{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f00000021c0)=""/187, 0xbb}, {&(0x7f0000002280)=""/243, 0xf3}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000002380)=""/204, 0xcc}], 0x4, &(0x7f00000024c0)=""/220, 0xdc, 0x5}, 0x2}, {{&(0x7f00000025c0)=@xdp, 0x80, &(0x7f0000002840)=[{&(0x7f0000002640)=""/201, 0xc9}, {&(0x7f0000002740)=""/224, 0xe0}], 0x2, &(0x7f0000002880)=""/53, 0x35, 0xcfde}, 0x1}, {{&(0x7f00000028c0)=@rc, 0x80, &(0x7f0000004d80)=[{&(0x7f0000002940)=""/3, 0x3}, {&(0x7f0000003b00)=""/251, 0xfb}, {&(0x7f0000003c00)=""/193, 0xc1}, {&(0x7f0000003d00)=""/85, 0x55}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x5, &(0x7f0000004e00)=""/4096, 0x1000, 0x20}, 0xaf13}, {{&(0x7f0000005e00)=@ipx, 0x80, &(0x7f0000007400)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/227, 0xe3}, {&(0x7f0000006f80)=""/218, 0xda}, {&(0x7f0000007080)=""/81, 0x51}, {&(0x7f0000007100)=""/121, 0x79}, {&(0x7f0000007180)=""/68, 0x44}, {&(0x7f0000007200)=""/68, 0x44}, {&(0x7f0000007280)=""/123, 0x7b}, {&(0x7f0000007300)=""/250, 0xfa}, {&(0x7f00000029c0)=""/22, 0x16}], 0xa, &(0x7f00000074c0)=""/2, 0x2, 0xb5f}, 0x1ff}], 0x6, 0x2, &(0x7f00000076c0)={r4, r5+10000000}) socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000007700)=0xa88, 0x4) mount$fuse(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='fuse\x00', 0x80000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}, {@max_read={'max_read', 0x3d, 0x101}, 0x2c}, {@default_permissions='default_permissions', 0x2c}]}}) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000380)) 00:05:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000ec5000)={0x2, r1}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ecaffc)=0x0) get_robust_list(r2, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "9f013ca08b2c39322ae3c0728f4403d4c55a001692f42be319"}, 0x1d) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x5, 0xecd3, 0x8, 0x5, 0x10000}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r4, 0x3}, 0x8) 00:05:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="c3"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)=@proc={0x10}, 0xc, &(0x7f0000000400)=[{&(0x7f0000001040)={0xe2c, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xce4, 0x0, [@generic="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", @typed={0x8, 0x4c, @ipv4=@multicast2=0xe0000002}, @typed={0x4, 0x5a}]}, @nested={0x138, 0x8e, [@typed={0xcc, 0x37, @binary="326e7967abe891ef17fa3f6d009da00654fa4ee182428927ce91c64b1b74fc329775d332be610432a8d3db5fd8f1ac3fa20b99a6473ac0516b5ec3e3685d0ce2953b46cc8f24ce6c80343d9abb656e3cf19997b1b62c81609afe063365ef7afd23c70ad9aeb60c8b5622e9c36004539addb715d707754af6ec702746fe2cbd711a6a3aa22f660c52111ced24dd751579ad7b51aeb386d0ca03a9a2a65eda8479d096fbb4a02ffbad172c76f5c14c0bb73edea3d364c97e0d692980f9525f28ca493606c166ceb0"}, @generic, @generic="4386dd13a8f60d0fd917593f4d9b89ce07008594aaf31789f6356feea7dd4b455a506d25077352fee01ad1af92ce5d4ee35076e9dc5bb1ea4d9407c446b20d820f43d2c783677d69e8f3488a6e18c97b6d2ffe7929", @typed={0x10, 0x41, @str='/dev/kvm\x00'}]}]}, 0xe2c}, {&(0x7f0000004540)={0xec, 0x29, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x62, @uid}, @nested={0xd4, 0x1f, [@generic="51f0822c6cf4918d94d62de2989c573e5d67e6ae2832474fdebd6e6fa63bac3b0394b3a7114ab098d3c88c4c2c64d712c05f12bda305720e6881a4e7c024d930da0f9b254dbaf2a69a01972a700c4334e233f9d786721ae6348c369ee1a117aa099190e22367186aa8c7c5e7029afc5e38802015b0d02cdd93ab1382de1d5d744073d59361aa5529ac31720372cad781131bfa4ef9a4ecdf4c70f7227619023678e50daa7618a4925440a9322931625b5881810f0e55848ea884f341e1ca298f48835d65782a6fd0ba865a3bf38b45cd"]}]}, 0xec}, {&(0x7f00000003c0)={0x10, 0x19, 0x609, 0x70bd29, 0x25dfdbfb}, 0x10}], 0x3, &(0x7f0000000740)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}], 0x40, 0x10}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r5, &(0x7f0000458000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000def000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}}}}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @quote={{}, 0x0, &(0x7f00008e3000)={0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @connect}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}, {}, {}, @quote={{}, 0x0, &(0x7f00004f8000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0xff9a) recvmmsg(r4, &(0x7f0000002a00)=[{{&(0x7f0000002640)=@vsock, 0x10, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/196, 0xc4}], 0x3c5, &(0x7f0000002940)=""/154, 0x9a}}], 0x1, 0x3, &(0x7f0000002ac0)) 00:05:57 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000000000025000180000008009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10480, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e20, 0x75c, 0xa, 0x80, 0xa0, 0x33, 0x0, r1}, {0x2f04dd57, 0x1, 0x200, 0x80, 0xffffffff, 0x100000000000000, 0xffff, 0x81}, {0x1, 0xe, 0x1, 0x8}, 0x3, 0x6e6bbe, 0x3, 0x1, 0x3, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4, 0xb7186606f38714d2}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x1c}, 0x3502, 0x2, 0x2, 0x8, 0x38, 0x5, 0x1}}, 0xe8) 00:05:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 357.264150] ? find_held_lock+0x36/0x1c0 [ 357.268237] ? check_same_owner+0x340/0x340 [ 357.272571] ? rcu_note_context_switch+0x730/0x730 [ 357.277513] __should_failslab+0x124/0x180 [ 357.281748] should_failslab+0x9/0x14 [ 357.285531] __kmalloc+0x2c8/0x760 [ 357.289055] ? rcu_pm_notify+0xc0/0xc0 [ 357.292927] ? match_number.isra.0+0xbf/0x280 [ 357.297406] match_number.isra.0+0xbf/0x280 [ 357.301716] ? match_strdup+0xa0/0xa0 [ 357.305498] ? match_wildcard+0x3c0/0x3c0 [ 357.309629] ? do_syscall_64+0x1b9/0x820 [ 357.313676] match_int+0x23/0x30 [ 357.317041] parse_opts+0x32c/0x500 [ 357.320663] ? p9_fd_poll+0x2b0/0x2b0 [ 357.324450] ? kasan_check_read+0x11/0x20 [ 357.328579] ? rcu_is_watching+0x8c/0x150 [ 357.332717] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 357.337808] p9_fd_create+0x8b/0x3f0 [ 357.341505] ? p9_fd_show_options+0x1c0/0x1c0 [ 357.345988] ? lockdep_init_map+0x9/0x10 [ 357.350046] ? __raw_spin_lock_init+0x2d/0x100 [ 357.354622] p9_client_create+0x8ed/0x1770 [ 357.358843] ? p9_client_read+0xc60/0xc60 [ 357.362974] ? find_held_lock+0x36/0x1c0 [ 357.367044] ? __lockdep_init_map+0x105/0x590 [ 357.371537] ? kasan_check_write+0x14/0x20 [ 357.375751] ? __init_rwsem+0x1cc/0x2a0 [ 357.379709] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 357.384717] ? rcu_read_lock_sched_held+0x108/0x120 [ 357.389711] ? __kmalloc_track_caller+0x5f5/0x760 [ 357.394544] ? save_stack+0xa9/0xd0 [ 357.398163] ? save_stack+0x43/0xd0 [ 357.401773] ? kasan_kmalloc+0xc4/0xe0 [ 357.405641] ? kmem_cache_alloc_trace+0x152/0x780 [ 357.410474] ? memcpy+0x45/0x50 [ 357.413738] v9fs_session_init+0x21a/0x1a80 [ 357.418055] ? find_held_lock+0x36/0x1c0 [ 357.422114] ? v9fs_show_options+0x7e0/0x7e0 [ 357.426504] ? kasan_check_read+0x11/0x20 [ 357.430632] ? rcu_is_watching+0x8c/0x150 [ 357.434758] ? rcu_pm_notify+0xc0/0xc0 [ 357.438628] ? v9fs_mount+0x61/0x900 [ 357.442322] ? rcu_read_lock_sched_held+0x108/0x120 [ 357.447327] ? kmem_cache_alloc_trace+0x616/0x780 [ 357.452174] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 357.457698] v9fs_mount+0x7c/0x900 [ 357.461222] mount_fs+0xae/0x328 [ 357.464573] vfs_kern_mount.part.34+0xdc/0x4e0 [ 357.469136] ? may_umount+0xb0/0xb0 [ 357.472742] ? _raw_read_unlock+0x22/0x30 [ 357.476868] ? __get_fs_type+0x97/0xc0 [ 357.480739] do_mount+0x581/0x30e0 [ 357.484264] ? copy_mount_string+0x40/0x40 [ 357.488484] ? copy_mount_options+0x5f/0x380 [ 357.492871] ? rcu_read_lock_sched_held+0x108/0x120 [ 357.497869] ? kmem_cache_alloc_trace+0x616/0x780 [ 357.502706] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.508221] ? _copy_from_user+0xdf/0x150 [ 357.512350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.517866] ? copy_mount_options+0x285/0x380 [ 357.522356] ksys_mount+0x12d/0x140 [ 357.525964] __x64_sys_mount+0xbe/0x150 [ 357.529919] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 357.534916] do_syscall_64+0x1b9/0x820 [ 357.538783] ? syscall_return_slowpath+0x5e0/0x5e0 [ 357.543696] ? syscall_return_slowpath+0x31d/0x5e0 [ 357.548611] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 357.553954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 357.558781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.563946] RIP: 0033:0x455ab9 [ 357.567111] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.586284] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.593984] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 357.601235] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 357.608481] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 00:05:57 executing program 3 (fault-call:8 fault-nth:15): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 357.615735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 357.622991] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000e [ 357.631298] 9pnet: Insufficient options for proto=fd 00:05:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(des3_ede))\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0x3d3cf8772076e93b, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=@can={{}, 0x0, 0x0, 0x0, 0x0, "d30991fde9118c90"}, 0x10}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000000780)={&(0x7f00000003c0)=@l2, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/100, 0x64}], 0x1, &(0x7f0000000680)=""/235, 0xeb}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000140)={0x1, @empty, 0x4e20, 0x1, 'wlc\x00', 0x0, 0x4, 0x29}, 0x2c) syncfs(r0) 00:05:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018aebd, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x402, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x5) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040)) [ 357.939844] FAULT_INJECTION: forcing a failure. [ 357.939844] name failslab, interval 1, probability 0, space 0, times 0 [ 357.951140] CPU: 1 PID: 24682 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 357.958495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.967836] Call Trace: [ 357.970420] dump_stack+0x1c9/0x2b4 [ 357.974036] ? dump_stack_print_info.cold.2+0x52/0x52 [ 357.979210] ? kernel_text_address+0x79/0xf0 [ 357.983782] should_fail.cold.4+0xa/0x1a [ 357.987828] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 357.992918] ? save_stack+0xa9/0xd0 [ 357.996532] ? save_stack+0x43/0xd0 [ 358.000147] ? __kasan_slab_free+0x11a/0x170 [ 358.004540] ? find_held_lock+0x36/0x1c0 [ 358.008599] ? check_same_owner+0x340/0x340 [ 358.012904] ? rcu_note_context_switch+0x730/0x730 [ 358.017819] __should_failslab+0x124/0x180 [ 358.022041] should_failslab+0x9/0x14 [ 358.025828] __kmalloc+0x2c8/0x760 [ 358.029350] ? kfree+0x111/0x260 [ 358.032703] ? match_number.isra.0+0x19b/0x280 [ 358.037272] ? match_number.isra.0+0xbf/0x280 [ 358.041755] match_number.isra.0+0xbf/0x280 [ 358.046058] ? match_strdup+0xa0/0xa0 [ 358.049842] ? match_wildcard+0x3c0/0x3c0 [ 358.053974] ? do_syscall_64+0x1b9/0x820 [ 358.058025] match_int+0x23/0x30 [ 358.061379] parse_opts+0x32c/0x500 [ 358.064995] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.070000] ? p9_fd_poll+0x2b0/0x2b0 [ 358.073789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 358.078531] ? kasan_check_read+0x11/0x20 [ 358.082661] ? rcu_is_watching+0x8c/0x150 [ 358.086802] p9_fd_create+0x8b/0x3f0 [ 358.090499] ? p9_fd_show_options+0x1c0/0x1c0 [ 358.094980] ? lockdep_init_map+0x9/0x10 [ 358.099028] ? __raw_spin_lock_init+0x2d/0x100 [ 358.103598] p9_client_create+0x8ed/0x1770 [ 358.107823] ? p9_client_read+0xc60/0xc60 [ 358.111950] ? find_held_lock+0x36/0x1c0 [ 358.116004] ? __lockdep_init_map+0x105/0x590 [ 358.120492] ? kasan_check_write+0x14/0x20 [ 358.124707] ? __init_rwsem+0x1cc/0x2a0 [ 358.128666] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 358.133666] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.138664] ? __kmalloc_track_caller+0x5f5/0x760 [ 358.143488] ? save_stack+0xa9/0xd0 [ 358.147098] ? save_stack+0x43/0xd0 [ 358.150708] ? kasan_kmalloc+0xc4/0xe0 [ 358.154576] ? kmem_cache_alloc_trace+0x152/0x780 [ 358.159406] ? memcpy+0x45/0x50 [ 358.162673] v9fs_session_init+0x21a/0x1a80 [ 358.166980] ? find_held_lock+0x36/0x1c0 [ 358.171035] ? v9fs_show_options+0x7e0/0x7e0 [ 358.175431] ? kasan_check_read+0x11/0x20 [ 358.179563] ? rcu_is_watching+0x8c/0x150 [ 358.183690] ? rcu_pm_notify+0xc0/0xc0 [ 358.187563] ? v9fs_mount+0x61/0x900 [ 358.191258] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.196255] ? kmem_cache_alloc_trace+0x616/0x780 [ 358.201082] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 358.206600] v9fs_mount+0x7c/0x900 [ 358.210129] mount_fs+0xae/0x328 [ 358.213479] vfs_kern_mount.part.34+0xdc/0x4e0 [ 358.218045] ? may_umount+0xb0/0xb0 [ 358.221656] ? _raw_read_unlock+0x22/0x30 [ 358.225785] ? __get_fs_type+0x97/0xc0 [ 358.229656] do_mount+0x581/0x30e0 [ 358.233183] ? copy_mount_string+0x40/0x40 [ 358.237405] ? copy_mount_options+0x5f/0x380 [ 358.241794] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.246791] ? kmem_cache_alloc_trace+0x616/0x780 [ 358.251618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.257137] ? _copy_from_user+0xdf/0x150 [ 358.261270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.266790] ? copy_mount_options+0x285/0x380 [ 358.271268] ksys_mount+0x12d/0x140 [ 358.274881] __x64_sys_mount+0xbe/0x150 [ 358.278840] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 358.283840] do_syscall_64+0x1b9/0x820 [ 358.287707] ? finish_task_switch+0x1d3/0x870 [ 358.292184] ? syscall_return_slowpath+0x5e0/0x5e0 [ 358.297097] ? syscall_return_slowpath+0x31d/0x5e0 [ 358.302025] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 358.307376] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 358.312204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.317376] RIP: 0033:0x455ab9 [ 358.320545] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:05:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) [ 358.339762] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.347450] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 358.354698] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 358.361946] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 358.369198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 358.376447] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000000f [ 358.384072] 9pnet: Insufficient options for proto=fd 00:05:58 executing program 3 (fault-call:8 fault-nth:16): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000194, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:05:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8915, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x6, 0x2, 0x8, 0x600000000, 0x6, 0xfffffffffffffffa, 0x8e0}, 0x1c) r2 = dup(r1) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f00000000c0)={0x0, 0xffffffffe23cfe37, 0x2, 0x3, 0x9, 0xba}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) bind$packet(r1, &(0x7f00004a9000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}, 0x0) 00:05:58 executing program 7: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") keyctl$unlink(0x16, r0, r0) 00:05:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x10a40) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, &(0x7f00000000c0)=0xfffffe0e, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='comm\x00') sendfile(r2, r3, &(0x7f00000002c0), 0x10000000000443) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000200)={0x1f}, 0xa) 00:05:58 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) socketpair(0x5, 0x0, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000002c0)={0xffffffffffffffe1, 0x3, 0x16a96c1}) mlockall(0x2007ffffffffff) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="b200001a80afb9a5007a90ea27dae885790273061ef2918f40d1c9d8711c5057f74e76d92feb52944807f9ed05d0e7e6bcc7c3316b718cb1d7dd53130582a6d339234652aa608d5a8b28c6fcddd66aa8b03f4be50bf2f585753d8570b2be1931d3191de2c95a86d1edc9f7cdca5300882c1cc008a1a1b660eb45fc99b9cb30311f36ff5fcf8a070ac01383b5cd58f4aa2f1e415b7547bdf6817eeb0e929df5daeb2148cd9eb65b58dc7148a716ab1a99a92269ec1f05"], &(0x7f0000000100)=0xba) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0x7f}, &(0x7f0000000180)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$inet6(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000340)=0x1c) connect$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x2, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000001c0)=""/117) readv(r0, &(0x7f00000f9000), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x3, 0x6000}) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$KDDELIO(r1, 0x4b35, 0xff) 00:05:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad-generic)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x800) close(r2) 00:05:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:05:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x208, 0x1, 0xfff, r4}, &(0x7f0000000100)=0x10) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf004}) 00:05:58 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x608500, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x10000, {0x10000, 0x4, 0x1, 0x100000000, 0x0, 0x3}, 0xfffffffeffffffff}, 0xe) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) [ 358.721869] FAULT_INJECTION: forcing a failure. [ 358.721869] name failslab, interval 1, probability 0, space 0, times 0 [ 358.733182] CPU: 1 PID: 24714 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 358.740539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.749887] Call Trace: [ 358.752482] dump_stack+0x1c9/0x2b4 [ 358.756108] ? dump_stack_print_info.cold.2+0x52/0x52 [ 358.761284] ? kernel_text_address+0x79/0xf0 [ 358.765700] should_fail.cold.4+0xa/0x1a [ 358.769772] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 358.774876] ? save_stack+0xa9/0xd0 [ 358.778501] ? save_stack+0x43/0xd0 [ 358.782131] ? __kasan_slab_free+0x11a/0x170 [ 358.786543] ? find_held_lock+0x36/0x1c0 [ 358.790631] ? check_same_owner+0x340/0x340 [ 358.794950] ? rcu_note_context_switch+0x730/0x730 [ 358.799881] __should_failslab+0x124/0x180 [ 358.804127] should_failslab+0x9/0x14 [ 358.807935] __kmalloc+0x2c8/0x760 [ 358.811474] ? kfree+0x111/0x260 [ 358.814844] ? match_number.isra.0+0x19b/0x280 [ 358.819425] ? match_number.isra.0+0xbf/0x280 [ 358.823910] match_number.isra.0+0xbf/0x280 [ 358.828221] ? match_strdup+0xa0/0xa0 [ 358.832020] ? match_wildcard+0x3c0/0x3c0 [ 358.836176] ? do_syscall_64+0x1b9/0x820 [ 358.840254] match_int+0x23/0x30 [ 358.843630] parse_opts+0x32c/0x500 [ 358.847268] ? p9_fd_poll+0x2b0/0x2b0 [ 358.851090] ? kasan_check_read+0x11/0x20 [ 358.855946] ? rcu_is_watching+0x8c/0x150 [ 358.860101] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 358.865228] p9_fd_create+0x8b/0x3f0 [ 358.868951] ? p9_fd_show_options+0x1c0/0x1c0 [ 358.873457] ? lockdep_init_map+0x9/0x10 [ 358.877528] ? __raw_spin_lock_init+0x2d/0x100 [ 358.882124] p9_client_create+0x8ed/0x1770 [ 358.886362] ? p9_client_read+0xc60/0xc60 [ 358.890499] ? find_held_lock+0x36/0x1c0 [ 358.894556] ? __lockdep_init_map+0x105/0x590 [ 358.899044] ? kasan_check_write+0x14/0x20 [ 358.903265] ? __init_rwsem+0x1cc/0x2a0 [ 358.907222] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 358.912224] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.917225] ? __kmalloc_track_caller+0x5f5/0x760 [ 358.922054] ? save_stack+0xa9/0xd0 [ 358.925662] ? save_stack+0x43/0xd0 [ 358.929269] ? kasan_kmalloc+0xc4/0xe0 [ 358.933140] ? kmem_cache_alloc_trace+0x152/0x780 [ 358.937966] ? memcpy+0x45/0x50 [ 358.941233] v9fs_session_init+0x21a/0x1a80 [ 358.945543] ? find_held_lock+0x36/0x1c0 [ 358.949592] ? v9fs_show_options+0x7e0/0x7e0 [ 358.953988] ? kasan_check_read+0x11/0x20 [ 358.958117] ? rcu_is_watching+0x8c/0x150 [ 358.962245] ? rcu_pm_notify+0xc0/0xc0 [ 358.966121] ? v9fs_mount+0x61/0x900 [ 358.969817] ? rcu_read_lock_sched_held+0x108/0x120 [ 358.974813] ? kmem_cache_alloc_trace+0x616/0x780 [ 358.979641] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 358.985161] v9fs_mount+0x7c/0x900 [ 358.988687] mount_fs+0xae/0x328 [ 358.992048] vfs_kern_mount.part.34+0xdc/0x4e0 [ 358.996612] ? may_umount+0xb0/0xb0 [ 359.000222] ? _raw_read_unlock+0x22/0x30 [ 359.004351] ? __get_fs_type+0x97/0xc0 [ 359.008226] do_mount+0x581/0x30e0 [ 359.011752] ? copy_mount_string+0x40/0x40 [ 359.015972] ? copy_mount_options+0x5f/0x380 [ 359.020367] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.025372] ? kmem_cache_alloc_trace+0x616/0x780 [ 359.030199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.035718] ? _copy_from_user+0xdf/0x150 [ 359.039850] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.045369] ? copy_mount_options+0x285/0x380 [ 359.049847] ksys_mount+0x12d/0x140 [ 359.053460] __x64_sys_mount+0xbe/0x150 [ 359.057417] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 359.062420] do_syscall_64+0x1b9/0x820 [ 359.066291] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.071205] ? syscall_return_slowpath+0x31d/0x5e0 [ 359.076119] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.081470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.086303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.091474] RIP: 0033:0x455ab9 [ 359.094645] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.113858] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.121552] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 359.128803] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 359.136051] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 359.143300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 359.150550] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000010 [ 359.158110] 9pnet: Insufficient options for proto=fd 00:05:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 00:05:59 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) execveat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='ppp1\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='eth0ppp1!wlan1vmnet1\x00', &(0x7f00000002c0)='$em0\x00', &(0x7f0000000300)='eth0]/\x00'], &(0x7f0000000440)=[&(0x7f0000000380)='numa_maps\x00', &(0x7f00000003c0)='cachetag', &(0x7f0000000400)='port'], 0x1000) getgroups(0x3, &(0x7f0000000100)=[0xee01, 0xee00, 0x0]) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000480)={0x7, 0x1, 0x7fffffff}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}, {@cachetag={'cachetag', 0x3d, '/dev/ashmem\x00'}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r2}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) 00:05:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x3ff00, @loopback={0x0, 0x1}, 0x9}}, 0x401, 0xfff, 0x4, 0x1, 0x24}, &(0x7f0000000280)=0x98) write$P9_RREMOVE(r0, &(0x7f0000000180)={0x7, 0x7b}, 0x7) 00:05:59 executing program 3 (fault-call:8 fault-nth:17): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:05:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) flock(r2, 0x5) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000000)={0x3}) 00:05:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 00:05:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, r2}, 0x14) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000000c0)={0xfffffff3, 0x8, 0xfa00}, 0x10) [ 359.491103] FAULT_INJECTION: forcing a failure. [ 359.491103] name failslab, interval 1, probability 0, space 0, times 0 [ 359.502419] CPU: 1 PID: 24776 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 359.509763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.519096] Call Trace: [ 359.521672] dump_stack+0x1c9/0x2b4 [ 359.525284] ? dump_stack_print_info.cold.2+0x52/0x52 [ 359.530467] should_fail.cold.4+0xa/0x1a [ 359.534515] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 359.539611] ? find_held_lock+0x36/0x1c0 [ 359.543669] ? check_same_owner+0x340/0x340 [ 359.547973] ? rcu_note_context_switch+0x730/0x730 [ 359.552891] __should_failslab+0x124/0x180 [ 359.557112] should_failslab+0x9/0x14 [ 359.560896] __kmalloc+0x2c8/0x760 [ 359.564421] ? rcu_pm_notify+0xc0/0xc0 [ 359.568304] ? match_number.isra.0+0xbf/0x280 [ 359.572785] match_number.isra.0+0xbf/0x280 [ 359.577091] ? match_strdup+0xa0/0xa0 [ 359.580879] ? match_wildcard+0x3c0/0x3c0 [ 359.585014] ? do_syscall_64+0x1b9/0x820 [ 359.589066] match_int+0x23/0x30 [ 359.592419] parse_opts+0x32c/0x500 [ 359.596037] ? p9_fd_poll+0x2b0/0x2b0 [ 359.599827] ? kasan_check_read+0x11/0x20 [ 359.603955] ? rcu_is_watching+0x8c/0x150 [ 359.608085] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 359.613176] p9_fd_create+0x8b/0x3f0 [ 359.616875] ? p9_fd_show_options+0x1c0/0x1c0 [ 359.621356] ? lockdep_init_map+0x9/0x10 [ 359.625397] ? __raw_spin_lock_init+0x2d/0x100 [ 359.629962] p9_client_create+0x8ed/0x1770 [ 359.634188] ? p9_client_read+0xc60/0xc60 [ 359.638318] ? find_held_lock+0x36/0x1c0 [ 359.642376] ? __lockdep_init_map+0x105/0x590 [ 359.646857] ? kasan_check_write+0x14/0x20 [ 359.651072] ? __init_rwsem+0x1cc/0x2a0 [ 359.655031] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 359.660037] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.665038] ? __kmalloc_track_caller+0x5f5/0x760 [ 359.669865] ? save_stack+0xa9/0xd0 [ 359.673479] ? save_stack+0x43/0xd0 [ 359.677090] ? kasan_kmalloc+0xc4/0xe0 [ 359.680960] ? kmem_cache_alloc_trace+0x152/0x780 [ 359.685789] ? memcpy+0x45/0x50 [ 359.689058] v9fs_session_init+0x21a/0x1a80 [ 359.693366] ? find_held_lock+0x36/0x1c0 [ 359.697414] ? v9fs_show_options+0x7e0/0x7e0 [ 359.701806] ? kasan_check_read+0x11/0x20 [ 359.705934] ? rcu_is_watching+0x8c/0x150 [ 359.710066] ? rcu_pm_notify+0xc0/0xc0 [ 359.713937] ? v9fs_mount+0x61/0x900 [ 359.717633] ? rcu_read_lock_sched_held+0x108/0x120 [ 359.722632] ? kmem_cache_alloc_trace+0x616/0x780 [ 359.727460] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 359.732984] v9fs_mount+0x7c/0x900 [ 359.736511] mount_fs+0xae/0x328 [ 359.739862] vfs_kern_mount.part.34+0xdc/0x4e0 [ 359.744425] ? may_umount+0xb0/0xb0 [ 359.748034] ? _raw_read_unlock+0x22/0x30 [ 359.752162] ? __get_fs_type+0x97/0xc0 [ 359.756036] do_mount+0x581/0x30e0 [ 359.759561] ? copy_mount_string+0x40/0x40 [ 359.763778] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 359.768520] ? retint_kernel+0x10/0x10 [ 359.772394] ? copy_mount_options+0x1f0/0x380 [ 359.776870] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 359.781694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.787211] ? copy_mount_options+0x285/0x380 [ 359.791689] ksys_mount+0x12d/0x140 [ 359.795299] __x64_sys_mount+0xbe/0x150 [ 359.799257] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 359.804255] do_syscall_64+0x1b9/0x820 [ 359.808122] ? finish_task_switch+0x1d3/0x870 [ 359.812599] ? syscall_return_slowpath+0x5e0/0x5e0 [ 359.817509] ? syscall_return_slowpath+0x31d/0x5e0 [ 359.822426] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 359.827776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 359.832604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.837775] RIP: 0033:0x455ab9 [ 359.840941] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.860168] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.867860] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 359.875109] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 359.882362] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 359.889624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 359.896872] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000011 [ 359.906498] 9pnet: Insufficient options for proto=fd [ 359.919865] FAT-fs (loop4): Directory bread(block 128) failed [ 359.938228] FAT-fs (loop4): Directory bread(block 129) failed [ 359.972539] FAT-fs (loop4): Directory bread(block 130) failed [ 359.988621] FAT-fs (loop4): Directory bread(block 131) failed [ 359.996377] FAT-fs (loop4): Directory bread(block 132) failed [ 360.010941] FAT-fs (loop4): Directory bread(block 133) failed 00:06:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) getgroups(0x6, &(0x7f0000000180)=[0xee00, 0xee01, 0x0, 0xee00, 0xee01, 0xee00]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14}}, 0x10) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x1) accept$packet(r3, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000004680)=0x14) sendmsg$xdp(r3, &(0x7f0000004b00)={&(0x7f00000046c0)={0x2c, 0x2, r4, 0xf}, 0x10, &(0x7f0000004a80)=[{&(0x7f0000004700)="92979348f12ceb5904f1c933d8dd846750101d7c0db2d7ff11ea24473ccf16c0f35e492957b0e6e7cd4d152a121466b0e594ca10d6c0b1cec5f89fe1afd61a29d2aa656b4f02ca4691fa2a65b78ebf1405ddc9b9c021a32ab532b025693693eee3628cc27c1457556e97aca9a1913f8aff0dc87a38649d9e1639c73d52caab04b358ac70e8bd700164c96e7c3c6e29fa0f090d028319f342e70738f3022811bbe41633e2457be6e164b98c067fc9a0e6", 0xb0}, {&(0x7f00000047c0)="fcd19910514050614b1945dd8565e91f5be5e12c4ca07bc7b82b1c1b1f7c386dbf02a2de8484b64bcd900e64f45920361c25ae9e69e3caa66dc9fb70176f98280b1abf44a0c61b0922ea4b2c3f379f850e1c9f94a196256b68cc738d51c5da2eb96c9494b485d9908098b59d16283c68e9508e9f9621e1685640811a6b1210b94affc93c2f432405e1b04eb782232ef7704ab3f9980c3b19e2961c5308158f8f81a84fe733f90cdd47d4a8caba44f14fdf70587df4f03194750b98808123d39844f3525bbf60adfc0673c2726162cc66bf32d7061ba05876049a1b57a4e9e3ff3ace1f77b03599a3b953e45c609bd8", 0xef}, {&(0x7f00000048c0)="ac9de8477a319ffcc0f25e9a77279c8f2ffceb61086a958bbc5bbbac49ce64718da01b595f352e84240227d8393b4df64a72ad03d58d3deaae047aa9a6ba4706c75613ad58ab79901a5c5514d469811e762d7d9936023a127990022d01ba9e2e38e461d865b3108cd5c5c93b8d5390eee7b4fb9ca153de02be3344b9680500bd4fc499a2261db74786", 0x89}, {&(0x7f0000004980)="e1c1f3365b11e8efa90156e53db598a144", 0x11}, {&(0x7f00000049c0)="83ba4f6a26ebbc3c7beb36e1748727798084aaf511028a1efc0db538c3039bad23d772d43a4137ebd51020b22c310a550ecbec22307c06da56dbb2dbaf4074821cc19ca339438daec3261887292346f7967696f289d4e198f758b37135817793486a89d0e9be422fc40971e2a3706678a29949cd4013fcace2c565f6864c7edab45f0c435341cfa0173f2d4e9a46ac5696dea9f23db97099fd6cd6efad2c8c92e7bdde08e3ae679ffcb9261d2d74b8", 0xaf}], 0x5, 0x0, 0x0, 0x80}, 0x11) listen(r0, 0x7ff) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) listen(r0, 0x8) 00:06:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 00:06:00 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000c6, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:06:00 executing program 7: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8916, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r0, 0x1279, &(0x7f0000000040)) 00:06:00 executing program 3 (fault-call:8 fault-nth:18): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x800) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7fffffff, 0x4001) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f00000000c0)={0x8, 0x88, 0xffffffffd588ba4d, 0xfffffffffffffffd}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f00000002c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x183, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x0, 0x2000000000010000}) [ 360.023603] FAT-fs (loop4): Directory bread(block 134) failed [ 360.032490] FAT-fs (loop4): Directory bread(block 135) failed [ 360.041430] FAT-fs (loop4): Directory bread(block 136) failed [ 360.049353] FAT-fs (loop4): Directory bread(block 137) failed 00:06:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}) 00:06:00 executing program 7: r0 = socket(0x0, 0x3, 0x1fd) setsockopt(r0, 0xff, 0x1, &(0x7f0000000040), 0x0) [ 360.175824] FAT-fs (loop4): Directory bread(block 128) failed [ 360.185171] FAT-fs (loop4): Directory bread(block 129) failed [ 360.193895] FAT-fs (loop4): Directory bread(block 130) failed [ 360.209890] FAT-fs (loop4): Directory bread(block 131) failed [ 360.216462] FAT-fs (loop4): Directory bread(block 132) failed 00:06:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c08df84ee0000000000000000060000002860e1c7"], 0x10}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000000000400000b47ea50e44bea468e000eac84640bf9f11e148ab04505d6bb8957164b0a42fcb1e5914836a0f786c665aec0f94563ae118f6980d3763c536702f8b3796588b284f4df8eb2097cb7f8dc4abe7731debffb7f05d0dd44b0838d2e75f1dc98b82f164c009ab34566b30b452616939b74433f5bb88e10dd5783503672a31a5fde9a49481165792f57e71fc0d2cb047cb8c6ad0a8c7769b7a5a1fae173f2c78066cb6101ec17fa0602ecf6810607c25b7b06e83eadf784e7320156a801fc2a94e2c"], 0x10}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) fcntl$lock(r1, 0x0, &(0x7f0000000240)={0x3, 0x2, 0x8, 0x0, r2}) ioctl$TCFLSH(r1, 0x540b, 0x1000) [ 360.222635] FAT-fs (loop4): Directory bread(block 133) failed [ 360.229158] FAT-fs (loop4): Directory bread(block 134) failed [ 360.236114] FAT-fs (loop4): Directory bread(block 135) failed [ 360.242396] FAT-fs (loop4): Directory bread(block 136) failed [ 360.248551] FAT-fs (loop4): Directory bread(block 137) failed 00:06:00 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 360.300832] FAULT_INJECTION: forcing a failure. [ 360.300832] name failslab, interval 1, probability 0, space 0, times 0 [ 360.312166] CPU: 1 PID: 24807 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 360.319523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.328873] Call Trace: [ 360.331463] dump_stack+0x1c9/0x2b4 [ 360.335084] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.340268] ? kernel_text_address+0x79/0xf0 [ 360.344671] should_fail.cold.4+0xa/0x1a [ 360.348721] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.353814] ? save_stack+0xa9/0xd0 [ 360.357427] ? save_stack+0x43/0xd0 [ 360.361042] ? __kasan_slab_free+0x11a/0x170 [ 360.365439] ? find_held_lock+0x36/0x1c0 [ 360.369494] ? check_same_owner+0x340/0x340 [ 360.373799] ? rcu_note_context_switch+0x730/0x730 [ 360.378716] __should_failslab+0x124/0x180 [ 360.382936] should_failslab+0x9/0x14 [ 360.386720] __kmalloc+0x2c8/0x760 [ 360.390242] ? kfree+0x111/0x260 [ 360.393592] ? match_number.isra.0+0x19b/0x280 [ 360.398161] ? match_number.isra.0+0xbf/0x280 [ 360.402640] match_number.isra.0+0xbf/0x280 [ 360.406946] ? match_strdup+0xa0/0xa0 [ 360.410731] ? match_wildcard+0x3c0/0x3c0 [ 360.414863] ? do_syscall_64+0x1b9/0x820 [ 360.418913] match_int+0x23/0x30 [ 360.422266] parse_opts+0x32c/0x500 [ 360.425880] ? p9_fd_poll+0x2b0/0x2b0 [ 360.429669] ? kasan_check_read+0x11/0x20 [ 360.433797] ? rcu_is_watching+0x8c/0x150 [ 360.437932] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 360.443033] p9_fd_create+0x8b/0x3f0 [ 360.446730] ? p9_fd_show_options+0x1c0/0x1c0 [ 360.451213] ? lockdep_init_map+0x9/0x10 [ 360.455259] ? __raw_spin_lock_init+0x2d/0x100 [ 360.459828] p9_client_create+0x8ed/0x1770 [ 360.464051] ? p9_client_read+0xc60/0xc60 [ 360.468183] ? find_held_lock+0x36/0x1c0 [ 360.472241] ? __lockdep_init_map+0x105/0x590 [ 360.476724] ? kasan_check_write+0x14/0x20 [ 360.480941] ? __init_rwsem+0x1cc/0x2a0 [ 360.484897] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 360.489904] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.494905] ? __kmalloc_track_caller+0x5f5/0x760 [ 360.499731] ? save_stack+0xa9/0xd0 [ 360.503343] ? save_stack+0x43/0xd0 [ 360.506954] ? kasan_kmalloc+0xc4/0xe0 [ 360.510821] ? kmem_cache_alloc_trace+0x152/0x780 [ 360.515647] ? memcpy+0x45/0x50 [ 360.518920] v9fs_session_init+0x21a/0x1a80 [ 360.523225] ? find_held_lock+0x36/0x1c0 [ 360.527278] ? v9fs_show_options+0x7e0/0x7e0 [ 360.531674] ? kasan_check_read+0x11/0x20 [ 360.535803] ? rcu_is_watching+0x8c/0x150 [ 360.539934] ? rcu_pm_notify+0xc0/0xc0 [ 360.543806] ? v9fs_mount+0x61/0x900 [ 360.547505] ? rcu_read_lock_sched_held+0x108/0x120 [ 360.552505] ? kmem_cache_alloc_trace+0x616/0x780 [ 360.557334] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 360.562853] v9fs_mount+0x7c/0x900 [ 360.566381] mount_fs+0xae/0x328 [ 360.569733] vfs_kern_mount.part.34+0xdc/0x4e0 [ 360.574301] ? may_umount+0xb0/0xb0 [ 360.577912] ? _raw_read_unlock+0x22/0x30 [ 360.582042] ? __get_fs_type+0x97/0xc0 [ 360.585916] do_mount+0x581/0x30e0 [ 360.589442] ? copy_mount_string+0x40/0x40 [ 360.593662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 360.598403] ? retint_kernel+0x10/0x10 [ 360.602275] ? copy_mount_options+0x1f0/0x380 [ 360.606754] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 360.611578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.617097] ? copy_mount_options+0x285/0x380 [ 360.621577] ksys_mount+0x12d/0x140 [ 360.625189] __x64_sys_mount+0xbe/0x150 [ 360.629147] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 360.634149] do_syscall_64+0x1b9/0x820 [ 360.638027] ? syscall_return_slowpath+0x5e0/0x5e0 [ 360.642942] ? syscall_return_slowpath+0x31d/0x5e0 [ 360.647856] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 360.653207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 360.658038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.663210] RIP: 0033:0x455ab9 [ 360.666375] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.685591] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.693283] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:06:00 executing program 3 (fault-call:8 fault-nth:19): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 360.700532] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 360.707780] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 360.715035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 360.722287] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000012 [ 360.729817] 9pnet: Insufficient options for proto=fd 00:06:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}) 00:06:00 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1, 0x0) r1 = socket$kcm(0x29, 0x1, 0x0) recvmmsg(r1, &(0x7f0000004640)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/80, 0x50}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/140, 0x8c}], 0x6, &(0x7f0000000680)=""/57, 0x39, 0x800}, 0x1f}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000980)=""/20, 0x14}, {&(0x7f00000009c0)=""/17, 0x11}, {&(0x7f0000000a00)=""/63, 0x3f}], 0x8, &(0x7f0000000ac0)=""/38, 0x26, 0x4}, 0x3}, {{&(0x7f0000000b00)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/99, 0x63}, {&(0x7f0000000c00)=""/219, 0xdb}, {&(0x7f0000000d00)=""/240, 0xf0}, {&(0x7f0000000e00)=""/19, 0x13}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/15, 0xf}], 0x6, 0x0, 0x0, 0x2}, 0x1ff}, {{&(0x7f0000000fc0)=@alg, 0x80, &(0x7f0000001080)=[{&(0x7f0000001040)=""/25, 0x19}], 0x1, &(0x7f00000010c0)=""/3, 0x3, 0x68d}, 0x7fff}, {{&(0x7f0000001100)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/26, 0x1a}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/80, 0x50}], 0x3, &(0x7f0000001280)=""/169, 0xa9, 0x3}, 0x800}, {{&(0x7f0000004400)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004500)=[{&(0x7f0000001340)=""/40, 0x28}, {&(0x7f0000004480)=""/70, 0x46}], 0x2, &(0x7f0000004540)=""/230, 0xe6, 0x3}, 0x10cb}], 0x6, 0x40000160, &(0x7f00000047c0)) ioctl(r0, 0x8914, &(0x7f00000048c0)="2b91414df5eb0ea4b63e9797c89ff73ed38907ff259145c2fb6e836af25e3e204322e2c55dc0ccbb30") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000040)=0x2220, 0xff30) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000004800)={0x4, 0x1000, 0x3, 0x0, 0x0, [{r0, 0x0, 0x9}, {r2, 0x0, 0x5}, {r3, 0x0, 0x5}]}) recvmsg(r5, &(0x7f00000013c0)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000001380)=""/45, 0x2d}, 0x0) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r7 = socket$inet6(0xa, 0x0, 0x3fe) setsockopt$inet6_dccp_int(r7, 0x21, 0x4, &(0x7f0000000140)=0x7ff, 0x4) keyctl$get_keyring_id(0x0, r6, 0x22) sendmmsg(r4, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000018c0)}}], 0x1, 0x0) [ 360.924468] FAULT_INJECTION: forcing a failure. [ 360.924468] name failslab, interval 1, probability 0, space 0, times 0 [ 360.935890] CPU: 0 PID: 24829 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 360.943258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.952604] Call Trace: [ 360.955199] dump_stack+0x1c9/0x2b4 [ 360.958841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 360.964034] ? __save_stack_trace+0x8d/0xf0 [ 360.968379] should_fail.cold.4+0xa/0x1a [ 360.972451] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 360.977561] ? save_stack+0x43/0xd0 [ 360.981198] ? kasan_kmalloc+0xc4/0xe0 [ 360.985087] ? kmem_cache_alloc_trace+0x152/0x780 [ 360.989935] ? p9_client_prepare_req.part.8+0x5f2/0xcd0 [ 360.995298] ? p9_client_rpc+0x1bd/0x1400 [ 360.999450] ? p9_client_create+0xdb0/0x1770 [ 361.003860] ? v9fs_mount+0x7c/0x900 [ 361.007578] ? mount_fs+0xae/0x328 [ 361.011119] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 361.015878] ? do_mount+0x581/0x30e0 [ 361.019594] ? ksys_mount+0x12d/0x140 [ 361.023577] ? __x64_sys_mount+0xbe/0x150 [ 361.027730] ? graph_lock+0x170/0x170 [ 361.031533] ? graph_lock+0x170/0x170 [ 361.035338] ? lock_downgrade+0x8f0/0x8f0 [ 361.039498] ? lock_downgrade+0x8f0/0x8f0 [ 361.043673] ? check_same_owner+0x340/0x340 [ 361.047998] ? rcu_note_context_switch+0x730/0x730 [ 361.052931] __should_failslab+0x124/0x180 [ 361.057175] should_failslab+0x9/0x14 [ 361.060978] kmem_cache_alloc_trace+0x2cb/0x780 [ 361.065650] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 361.070761] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 361.075788] p9_client_prepare_req.part.8+0x82a/0xcd0 [ 361.080996] ? p9_free_req.isra.7+0x140/0x140 [ 361.085497] ? p9_pollwait+0x83/0x230 [ 361.089298] ? p9_conn_create+0x730/0x730 [ 361.093446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.098988] p9_client_rpc+0x1bd/0x1400 [ 361.102952] ? p9_fd_poll+0x1e0/0x2b0 [ 361.106748] ? p9_conn_create+0x55b/0x730 [ 361.110886] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 361.116230] ? __fget+0x414/0x670 [ 361.119666] ? rcu_is_watching+0x61/0x150 [ 361.123792] ? expand_files.part.8+0x9c0/0x9c0 [ 361.128370] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.133382] ? p9_fd_show_options+0x1c0/0x1c0 [ 361.137867] ? lockdep_init_map+0x9/0x10 [ 361.141916] p9_client_create+0xdb0/0x1770 [ 361.146143] ? p9_client_read+0xc60/0xc60 [ 361.150272] ? find_held_lock+0x36/0x1c0 [ 361.154324] ? __lockdep_init_map+0x105/0x590 [ 361.158811] ? kasan_check_write+0x14/0x20 [ 361.163033] ? __init_rwsem+0x1cc/0x2a0 [ 361.166992] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 361.171998] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.177003] ? __kmalloc_track_caller+0x5f5/0x760 [ 361.181833] ? save_stack+0xa9/0xd0 [ 361.185448] ? save_stack+0x43/0xd0 [ 361.189059] ? kasan_kmalloc+0xc4/0xe0 [ 361.192927] ? kmem_cache_alloc_trace+0x152/0x780 [ 361.197753] ? memcpy+0x45/0x50 [ 361.201024] v9fs_session_init+0x21a/0x1a80 [ 361.205330] ? find_held_lock+0x36/0x1c0 [ 361.209383] ? v9fs_show_options+0x7e0/0x7e0 [ 361.213776] ? kasan_check_read+0x11/0x20 [ 361.217904] ? rcu_is_watching+0x8c/0x150 [ 361.222036] ? rcu_pm_notify+0xc0/0xc0 [ 361.225911] ? v9fs_mount+0x61/0x900 [ 361.229609] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.234609] ? kmem_cache_alloc_trace+0x616/0x780 [ 361.239439] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.244961] v9fs_mount+0x7c/0x900 [ 361.248489] mount_fs+0xae/0x328 [ 361.251844] vfs_kern_mount.part.34+0xdc/0x4e0 [ 361.256409] ? may_umount+0xb0/0xb0 [ 361.260026] ? _raw_read_unlock+0x22/0x30 [ 361.264155] ? __get_fs_type+0x97/0xc0 [ 361.268034] do_mount+0x581/0x30e0 [ 361.271560] ? copy_mount_string+0x40/0x40 [ 361.275782] ? copy_mount_options+0x5f/0x380 [ 361.280174] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.285174] ? kmem_cache_alloc_trace+0x616/0x780 [ 361.290000] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 361.295524] ? _copy_from_user+0xdf/0x150 [ 361.299654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.305175] ? copy_mount_options+0x285/0x380 [ 361.309656] ksys_mount+0x12d/0x140 [ 361.313266] __x64_sys_mount+0xbe/0x150 [ 361.317224] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 361.322224] do_syscall_64+0x1b9/0x820 [ 361.326094] ? finish_task_switch+0x1d3/0x870 [ 361.330570] ? syscall_return_slowpath+0x5e0/0x5e0 [ 361.335482] ? syscall_return_slowpath+0x31d/0x5e0 [ 361.340399] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 361.345751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 361.350579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.355749] RIP: 0033:0x455ab9 00:06:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x10001, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x3bffa, 0x0) io_setup(0x6, &(0x7f0000000080)=0x0) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f0000000440)=""/225, 0xfffffffffffffedf, &(0x7f0000000000)=""/8}}, 0x68) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0), 0x2b7}]) 00:06:01 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xbc6, 0x60000) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5000000000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xf68, 0x8008, 0x4, 0x80000001, r2}, 0x10) 00:06:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 361.358915] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.378138] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.385828] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 361.393080] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 361.400332] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 361.407592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 361.414842] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000013 [ 361.422424] 9pnet: Couldn't grow tag array 00:06:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={"76b0aaedd708f8ffffff0500", &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) close(0xffffffffffffffff) 00:06:01 executing program 1: r0 = socket$netlink(0xa, 0x6, 0x80000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") flistxattr(r1, &(0x7f0000000000)=""/146, 0x92) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xd, &(0x7f0000001ffc)=0x2, 0x1) listen(r1, 0x0) 00:06:01 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000019b, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:06:01 executing program 3 (fault-call:8 fault-nth:20): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 361.730806] FAULT_INJECTION: forcing a failure. [ 361.730806] name failslab, interval 1, probability 0, space 0, times 0 [ 361.742432] CPU: 1 PID: 24869 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 361.749801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.759155] Call Trace: [ 361.761751] dump_stack+0x1c9/0x2b4 [ 361.765398] ? dump_stack_print_info.cold.2+0x52/0x52 [ 361.770603] ? graph_lock+0x170/0x170 [ 361.774416] should_fail.cold.4+0xa/0x1a [ 361.778492] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 361.783602] ? find_held_lock+0x36/0x1c0 [ 361.787672] ? graph_lock+0x170/0x170 [ 361.791476] ? lock_downgrade+0x8f0/0x8f0 [ 361.795623] ? lock_downgrade+0x8f0/0x8f0 [ 361.799786] ? kasan_check_read+0x11/0x20 [ 361.803934] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.808350] ? find_held_lock+0x36/0x1c0 [ 361.812420] ? lock_acquire+0x1e4/0x540 [ 361.816396] ? p9_client_prepare_req.part.8+0x534/0xcd0 [ 361.821770] __should_failslab+0x124/0x180 [ 361.826015] should_failslab+0x9/0x14 [ 361.829817] kmem_cache_alloc_trace+0x4b/0x780 [ 361.834399] ? kasan_check_write+0x14/0x20 [ 361.838634] ? do_raw_spin_lock+0xc1/0x200 [ 361.842881] p9_client_prepare_req.part.8+0x5f2/0xcd0 [ 361.848086] ? p9_free_req.isra.7+0x140/0x140 [ 361.852592] ? p9_pollwait+0x83/0x230 [ 361.856400] ? p9_conn_create+0x730/0x730 [ 361.860554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.866101] p9_client_rpc+0x1bd/0x1400 [ 361.870079] ? p9_fd_poll+0x1e0/0x2b0 [ 361.873891] ? p9_conn_create+0x55b/0x730 [ 361.878047] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 361.883417] ? __fget+0x414/0x670 [ 361.886881] ? rcu_is_watching+0x61/0x150 [ 361.891033] ? expand_files.part.8+0x9c0/0x9c0 [ 361.895629] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.900670] ? p9_fd_show_options+0x1c0/0x1c0 [ 361.904813] FAT-fs (loop4): Directory bread(block 128) failed [ 361.905170] ? lockdep_init_map+0x9/0x10 [ 361.905198] p9_client_create+0xdb0/0x1770 [ 361.905219] ? p9_client_read+0xc60/0xc60 [ 361.916199] FAT-fs (loop4): Directory bread(block 129) failed [ 361.919349] ? find_held_lock+0x36/0x1c0 [ 361.919382] ? __lockdep_init_map+0x105/0x590 [ 361.919406] ? kasan_check_write+0x14/0x20 [ 361.919420] ? __init_rwsem+0x1cc/0x2a0 [ 361.919436] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 361.919456] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.919472] ? __kmalloc_track_caller+0x5f5/0x760 [ 361.919486] ? save_stack+0xa9/0xd0 [ 361.919502] ? save_stack+0x43/0xd0 [ 361.919520] ? kasan_kmalloc+0xc4/0xe0 [ 361.940503] FAT-fs (loop4): Directory bread(block 130) failed [ 361.942258] ? kmem_cache_alloc_trace+0x152/0x780 [ 361.942276] ? memcpy+0x45/0x50 [ 361.942299] v9fs_session_init+0x21a/0x1a80 [ 361.942319] ? find_held_lock+0x36/0x1c0 [ 361.942343] ? v9fs_show_options+0x7e0/0x7e0 [ 361.942364] ? kasan_check_read+0x11/0x20 [ 361.942377] ? rcu_is_watching+0x8c/0x150 [ 361.942390] ? rcu_pm_notify+0xc0/0xc0 [ 361.942409] ? v9fs_mount+0x61/0x900 [ 361.955981] FAT-fs (loop4): Directory bread(block 131) failed [ 361.956359] ? rcu_read_lock_sched_held+0x108/0x120 [ 361.956375] ? kmem_cache_alloc_trace+0x616/0x780 00:06:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x1ff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(r2, &(0x7f00000026c0)={&(0x7f00000002c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)="b30d7607bb21741609b44aac0d80ce8a8c9432b6071e", 0x16}, {&(0x7f0000000340)="0c05514f59786162a445e89dd76f7e83b28027257bf012291ed3729157da320757ee146e3d310f612fc197de7bcbb66ee09da4ef3a3d6d411e5b365b5a38df76a1291573fbc24a58e9b53f6f8e2278933c2ebeddacd8e688d492f512d733d31a295e217102e84cfcf6a62046766ab0818f12696caf148a1039609777ffd3e9536adc1e3f43b6f206cedd45f30b2c4f16f0572618ae90fcdb746720b6c2aabe44d90074aed5bc25e88a0339855a4196c5dca8944ea3acd14becee5ca245", 0xbd}, {&(0x7f0000000240)="55a370915c16c529108084c208b926e811ed8075795c592459e6798def38cfcaba8926", 0x23}, {&(0x7f0000000400)="29ea7ddb29e8237c443e2d71f6b1c201b78c3e0b726f9eb082b2a997dcfec08523d9e283d3d83e4359154ed635251570d39d9fe48264de45ab303d3db4e6c5acea362ede945d458b9abcd2e3526cf23c0ec52e76ca943437110355ae2ac1dcc7bd46a8", 0x63}, {&(0x7f0000000540)="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", 0x1000}], 0x5, &(0x7f0000001540)=[{0x18, 0x109, 0x3f, "c5f9cf"}, {0x18, 0x118, 0x2, "16c9263bd011c9"}, {0x1010, 0x88, 0xa41, "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"}, {0x30, 0x84, 0x9, "68302f2432c39ee23c47e74c89065445210d361459fe5db294d17569d0776c7f"}, {0x100, 0x88, 0x7bb, "9503b0c3f5e2b5e10568be92739e63723a0eb90f5fbcd1be3b459d98214b340ef25c3f4be276a5880f3d10a00c50972e904caad321e318c92a653223db43ccc1c4e1e3d849895910e187a8071499d5d59bdac6f0bc52adf7d6df1369b90b6c6756de14244765d2fb8b4a8c534febbaf8fc08920df3198d4e37ae5cfc0fdd4f3eab51e79abf19213c91984d500c4ba4887bf5783742c9025dacf2067d1a8cbd86861de6dc695cbe976492e0f55984500af0e16cd7c02ec8bdad57773ce14746715746e937e54ca9f2bcda04ded748505181d1d2b8384adb8aeb5f069fbebc85a9699b03d196ff3aadb675f2b2e776"}], 0x1170, 0x4000000}, 0x10) sendto$inet6(r2, &(0x7f0000000080)='\b', 0x1, 0x4000000000, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x7ff}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500)={0x2}, 0xb) r3 = accept4(r1, &(0x7f00000000c0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x80, 0x0) recvmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f00000001c0)=""/114, 0x72}, 0x0) 00:06:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}) 00:06:02 executing program 3 (fault-call:8 fault-nth:21): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 361.956395] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.974183] FAT-fs (loop4): Directory bread(block 132) failed [ 361.978166] v9fs_mount+0x7c/0x900 [ 361.978190] mount_fs+0xae/0x328 [ 361.978212] vfs_kern_mount.part.34+0xdc/0x4e0 [ 361.978229] ? may_umount+0xb0/0xb0 [ 361.978245] ? _raw_read_unlock+0x22/0x30 [ 361.978259] ? __get_fs_type+0x97/0xc0 [ 361.978276] do_mount+0x581/0x30e0 [ 361.978291] ? do_raw_spin_unlock+0xa7/0x2f0 [ 361.978310] ? copy_mount_string+0x40/0x40 [ 361.978329] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 361.978351] ? retint_kernel+0x10/0x10 [ 361.978372] ? copy_mount_options+0x1a1/0x380 [ 361.994130] FAT-fs (loop4): Directory bread(block 133) failed [ 361.994806] ? copy_mount_options+0x1a4/0x380 [ 361.994824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.994838] ? copy_mount_options+0x285/0x380 [ 361.994856] ksys_mount+0x12d/0x140 [ 362.007120] FAT-fs (loop4): Directory bread(block 134) failed [ 362.007524] __x64_sys_mount+0xbe/0x150 [ 362.007542] ? trace_hardirqs_on_caller+0x421/0x5c0 00:06:02 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x2081f8) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) clock_gettime(0x0, &(0x7f00000029c0)) ioctl(r3, 0x1, &(0x7f0000000100)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:06:02 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r4 = syz_open_procfs(r0, &(0x7f00000001c0)='nt6\x00') ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000580)={0x0, 0x1, 0x4, 0x3}) setresuid(r1, r2, r3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x40a000, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000340)) pread64(r4, &(0x7f00000005c0)=""/100, 0x64, 0x0) ioctl(r4, 0x200, &(0x7f0000000640)="e2e6e49c240222c91a66dc8542a3815801d800981caa636bf2e60bdf0eeda32d7262b1929eca561749b52976967ede4e6ee7506ee3ba0b3ad5897351c1e9df5ec44b8d4eb4ce043b0ff6561334db1a7dd0dcd1ee") syz_emit_ethernet(0x140, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x3) [ 362.007561] do_syscall_64+0x1b9/0x820 [ 362.007579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 362.007596] ? syscall_return_slowpath+0x31d/0x5e0 [ 362.007622] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 362.017549] FAT-fs (loop4): Directory bread(block 135) failed [ 362.021051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.021075] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.021088] RIP: 0033:0x455ab9 [ 362.021092] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 [ 362.026963] FAT-fs (loop4): Directory bread(block 136) failed [ 362.031000] 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.031182] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.031198] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 362.031204] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 362.031211] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 362.031218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 362.031230] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000014 [ 362.037391] FAT-fs (loop4): Directory bread(block 137) failed [ 362.042617] 9pnet: Couldn't grow tag array [ 362.353119] FAT-fs (loop4): Directory bread(block 128) failed [ 362.359586] FAT-fs (loop4): Directory bread(block 129) failed [ 362.365949] FAT-fs (loop4): Directory bread(block 130) failed [ 362.372993] FAT-fs (loop4): Directory bread(block 131) failed [ 362.379309] FAT-fs (loop4): Directory bread(block 132) failed [ 362.388109] FAT-fs (loop4): Directory bread(block 133) failed [ 362.394504] FAT-fs (loop4): Directory bread(block 134) failed [ 362.400880] FAT-fs (loop4): Directory bread(block 135) failed [ 362.407196] FAT-fs (loop4): Directory bread(block 136) failed [ 362.413425] FAT-fs (loop4): Directory bread(block 137) failed 00:06:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) [ 362.475999] FAULT_INJECTION: forcing a failure. [ 362.475999] name failslab, interval 1, probability 0, space 0, times 0 [ 362.487382] CPU: 0 PID: 24899 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 362.494744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.504093] Call Trace: [ 362.506688] dump_stack+0x1c9/0x2b4 [ 362.510324] ? dump_stack_print_info.cold.2+0x52/0x52 [ 362.515516] ? __save_stack_trace+0x8d/0xf0 [ 362.519861] should_fail.cold.4+0xa/0x1a [ 362.523937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 362.529052] ? save_stack+0x43/0xd0 [ 362.532686] ? kasan_kmalloc+0xc4/0xe0 [ 362.536576] ? kmem_cache_alloc_trace+0x152/0x780 [ 362.541420] ? p9_client_prepare_req.part.8+0x5f2/0xcd0 [ 362.546782] ? p9_client_rpc+0x1bd/0x1400 [ 362.550931] ? p9_client_create+0xdb0/0x1770 [ 362.555341] ? v9fs_mount+0x7c/0x900 [ 362.559059] ? mount_fs+0xae/0x328 [ 362.562604] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 362.567364] ? do_mount+0x581/0x30e0 [ 362.571080] ? ksys_mount+0x12d/0x140 00:06:02 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000000000039a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/anycast6\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") preadv(r0, &(0x7f0000000480), 0x10000000000000f5, 0x10400003) dup3(r1, r1, 0x80000) 00:06:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x82000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) write$P9_RGETLOCK(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000037010001740d0000000000000600000000000000", @ANYRES32=r2, @ANYBLOB="000cdfd9a5cf24ec00"], 0x1e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x40000000) r3 = socket(0x11, 0x100000803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'ip6_vti0\x00', 0xa205}) [ 362.574882] ? __x64_sys_mount+0xbe/0x150 [ 362.579034] ? graph_lock+0x170/0x170 [ 362.582840] ? graph_lock+0x170/0x170 [ 362.586640] ? lock_downgrade+0x8f0/0x8f0 [ 362.590788] ? lock_downgrade+0x8f0/0x8f0 [ 362.594959] ? check_same_owner+0x340/0x340 [ 362.599289] ? rcu_note_context_switch+0x730/0x730 [ 362.604236] __should_failslab+0x124/0x180 [ 362.608474] should_failslab+0x9/0x14 [ 362.612279] kmem_cache_alloc_trace+0x2cb/0x780 [ 362.616956] ? _raw_spin_unlock_irqrestore+0x74/0xc0 00:06:02 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = dup(r0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000140)={0x1, 0xffffffffffffff9c}) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @rand_addr=0xfffffffffffffffb}}, 0x1e) prctl$setname(0xf, &(0x7f00000001c0)='bdev\x00') connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x200000}}, 0x18) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x2, 0x8001, 0xb7e1}) socketpair(0x10, 0x80a, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000100)={0x8, 0x3ff}) [ 362.622067] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 362.627102] p9_client_prepare_req.part.8+0x82a/0xcd0 [ 362.632307] ? p9_free_req.isra.7+0x140/0x140 [ 362.636802] ? p9_pollwait+0x83/0x230 [ 362.640585] ? p9_conn_create+0x730/0x730 [ 362.644716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.650239] p9_client_rpc+0x1bd/0x1400 [ 362.654193] ? p9_fd_poll+0x1e0/0x2b0 [ 362.657982] ? p9_conn_create+0x55b/0x730 [ 362.662128] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 362.667483] ? __fget+0x414/0x670 [ 362.670926] ? rcu_is_watching+0x61/0x150 [ 362.675054] ? expand_files.part.8+0x9c0/0x9c0 [ 362.679622] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.684626] ? p9_fd_show_options+0x1c0/0x1c0 [ 362.689105] ? lockdep_init_map+0x9/0x10 [ 362.693152] p9_client_create+0xdb0/0x1770 [ 362.697375] ? p9_client_read+0xc60/0xc60 [ 362.701524] ? find_held_lock+0x36/0x1c0 [ 362.705576] ? __lockdep_init_map+0x105/0x590 [ 362.710072] ? kasan_check_write+0x14/0x20 [ 362.714287] ? __init_rwsem+0x1cc/0x2a0 [ 362.718243] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 362.723243] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.728242] ? __kmalloc_track_caller+0x5f5/0x760 [ 362.733065] ? save_stack+0xa9/0xd0 [ 362.736672] ? save_stack+0x43/0xd0 [ 362.740279] ? kasan_kmalloc+0xc4/0xe0 [ 362.744156] ? kmem_cache_alloc_trace+0x152/0x780 [ 362.748989] ? memcpy+0x45/0x50 [ 362.752274] v9fs_session_init+0x21a/0x1a80 [ 362.756596] ? find_held_lock+0x36/0x1c0 [ 362.760644] ? v9fs_show_options+0x7e0/0x7e0 [ 362.765045] ? kasan_check_read+0x11/0x20 [ 362.769182] ? rcu_is_watching+0x8c/0x150 [ 362.773330] ? rcu_pm_notify+0xc0/0xc0 [ 362.777206] ? v9fs_mount+0x61/0x900 [ 362.780901] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.785896] ? kmem_cache_alloc_trace+0x616/0x780 [ 362.790723] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 362.796243] v9fs_mount+0x7c/0x900 [ 362.799775] mount_fs+0xae/0x328 [ 362.803134] vfs_kern_mount.part.34+0xdc/0x4e0 [ 362.807718] ? may_umount+0xb0/0xb0 [ 362.811329] ? _raw_read_unlock+0x22/0x30 [ 362.815464] ? __get_fs_type+0x97/0xc0 [ 362.819342] do_mount+0x581/0x30e0 [ 362.822864] ? do_raw_spin_unlock+0xa7/0x2f0 [ 362.827256] ? copy_mount_string+0x40/0x40 [ 362.831475] ? copy_mount_options+0x5f/0x380 [ 362.835870] ? rcu_read_lock_sched_held+0x108/0x120 [ 362.840869] ? kmem_cache_alloc_trace+0x616/0x780 [ 362.845700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.851235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.856763] ? copy_mount_options+0x285/0x380 [ 362.861241] ksys_mount+0x12d/0x140 [ 362.864851] __x64_sys_mount+0xbe/0x150 [ 362.868809] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 362.873808] do_syscall_64+0x1b9/0x820 [ 362.877677] ? syscall_return_slowpath+0x5e0/0x5e0 [ 362.882588] ? syscall_return_slowpath+0x31d/0x5e0 [ 362.887501] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 362.892846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 362.897674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.902842] RIP: 0033:0x455ab9 [ 362.906012] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:06:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x72, 0xa, 0xffe5}, [], {0x95}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 00:06:03 executing program 3 (fault-call:8 fault-nth:22): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 362.925234] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.932921] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 362.940176] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 362.947425] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 362.954681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 362.961949] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000015 [ 362.969618] 9pnet: Couldn't grow tag array 00:06:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000000cb, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) [ 363.261868] IPVS: ftp: loaded support on port[0] = 21 00:06:03 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000300)={0xfffffffffffffffd}, &(0x7f0000000380), &(0x7f00007adff0)={0x77359400}, 0x8) acct(&(0x7f0000000100)='./file0\x00') acct(&(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xffff, 0x7, 0x7f, 0x5, 0x10000, {0x0, @in6={{0xa, 0x4e20, 0x400, @empty, 0xfff}}, 0x0, 0x1ff, 0x80, 0x7, 0xcb0a}}, &(0x7f0000000200)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x101}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r1, 0x100000001, 0x7, 0x5, 0x100, 0x2, 0xa509, 0xd, {r2, @in6={{0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x7}}, 0x9, 0x0, 0x9, 0x2a, 0x3}}, &(0x7f0000000480)=0xb0) acct(&(0x7f0000000000)='./file0\x00') fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) [ 363.288647] FAULT_INJECTION: forcing a failure. [ 363.288647] name failslab, interval 1, probability 0, space 0, times 0 [ 363.299926] CPU: 1 PID: 24928 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 363.307286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.316641] Call Trace: [ 363.319234] dump_stack+0x1c9/0x2b4 [ 363.322875] ? dump_stack_print_info.cold.2+0x52/0x52 [ 363.328070] ? unwind_get_return_address+0x61/0xa0 [ 363.333016] should_fail.cold.4+0xa/0x1a 00:06:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4040, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={r2, 0x2, 0x1ff, 0x7ff, 0xa9, 0x0, 0x9}) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") unshare(0x2000400) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000000)={0x4, 0x59, "c13deed524cfbf11da5f172797de8a5f4a20f15a1da833225f8fd9679421f53e1e033ee2a94b74b6c825963679bec0062aa6dec10480d34e704450c86715185137fe91a1142d8fcef79d7d7fe9cd172607a91ae4e32262c8b1"}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140)=0x2, 0x4) [ 363.337094] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 363.342206] ? save_stack+0xa9/0xd0 [ 363.345841] ? save_stack+0x43/0xd0 [ 363.349472] ? kmem_cache_alloc_trace+0x152/0x780 [ 363.354322] ? p9_client_prepare_req.part.8+0x82a/0xcd0 [ 363.359693] ? p9_client_rpc+0x1bd/0x1400 [ 363.363845] ? p9_client_create+0xdb0/0x1770 [ 363.368263] ? v9fs_session_init+0x21a/0x1a80 [ 363.372760] ? v9fs_mount+0x7c/0x900 [ 363.376479] ? mount_fs+0xae/0x328 [ 363.380026] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 363.384788] ? do_mount+0x581/0x30e0 00:06:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}) [ 363.388509] ? ksys_mount+0x12d/0x140 [ 363.392312] ? __x64_sys_mount+0xbe/0x150 [ 363.396468] ? do_syscall_64+0x1b9/0x820 [ 363.400537] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.405907] ? graph_lock+0x170/0x170 [ 363.409713] ? lock_downgrade+0x8f0/0x8f0 [ 363.413880] ? lock_downgrade+0x8f0/0x8f0 [ 363.418067] ? check_same_owner+0x340/0x340 [ 363.422393] ? kasan_check_read+0x11/0x20 [ 363.426549] ? rcu_note_context_switch+0x730/0x730 [ 363.431486] __should_failslab+0x124/0x180 [ 363.435733] should_failslab+0x9/0x14 00:06:03 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000002280)='-5', 0x2) ftruncate(r0, 0x0) [ 363.439539] __kmalloc+0x2c8/0x760 [ 363.443086] ? __init_waitqueue_head+0x9e/0x150 [ 363.447763] ? init_wait_entry+0x1c0/0x1c0 [ 363.451999] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 363.457111] ? p9_fcall_alloc+0x1e/0x90 [ 363.461091] p9_fcall_alloc+0x1e/0x90 [ 363.464897] p9_client_prepare_req.part.8+0x7c9/0xcd0 [ 363.470098] ? p9_free_req.isra.7+0x140/0x140 [ 363.474599] ? p9_pollwait+0x83/0x230 [ 363.475674] IPVS: ftp: loaded support on port[0] = 21 [ 363.478413] ? p9_conn_create+0x730/0x730 [ 363.478432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.478451] p9_client_rpc+0x1bd/0x1400 [ 363.478466] ? p9_fd_poll+0x1e0/0x2b0 [ 363.478484] ? p9_conn_create+0x55b/0x730 [ 363.478501] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 363.478517] ? __fget+0x414/0x670 [ 363.478534] ? rcu_is_watching+0x61/0x150 [ 363.478549] ? expand_files.part.8+0x9c0/0x9c0 [ 363.478574] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.478599] ? p9_fd_show_options+0x1c0/0x1c0 [ 363.532251] ? lockdep_init_map+0x9/0x10 [ 363.536326] p9_client_create+0xdb0/0x1770 [ 363.540578] ? p9_client_read+0xc60/0xc60 [ 363.544723] ? find_held_lock+0x36/0x1c0 [ 363.548791] ? __lockdep_init_map+0x105/0x590 [ 363.553285] ? kasan_check_write+0x14/0x20 [ 363.557508] ? __init_rwsem+0x1cc/0x2a0 [ 363.561470] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 363.566478] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.571481] ? __kmalloc_track_caller+0x5f5/0x760 [ 363.576312] ? save_stack+0xa9/0xd0 [ 363.579926] ? save_stack+0x43/0xd0 [ 363.583540] ? kasan_kmalloc+0xc4/0xe0 [ 363.587410] ? kmem_cache_alloc_trace+0x152/0x780 [ 363.592239] ? memcpy+0x45/0x50 [ 363.595511] v9fs_session_init+0x21a/0x1a80 [ 363.599823] ? find_held_lock+0x36/0x1c0 [ 363.603884] ? v9fs_show_options+0x7e0/0x7e0 [ 363.608286] ? kasan_check_read+0x11/0x20 [ 363.612417] ? rcu_is_watching+0x8c/0x150 [ 363.616549] ? rcu_pm_notify+0xc0/0xc0 [ 363.620427] ? v9fs_mount+0x61/0x900 [ 363.624127] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.629130] ? kmem_cache_alloc_trace+0x616/0x780 [ 363.633963] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 363.639487] v9fs_mount+0x7c/0x900 [ 363.643025] mount_fs+0xae/0x328 [ 363.646385] vfs_kern_mount.part.34+0xdc/0x4e0 [ 363.650955] ? may_umount+0xb0/0xb0 [ 363.654571] ? _raw_read_unlock+0x22/0x30 [ 363.658701] ? __get_fs_type+0x97/0xc0 [ 363.662582] do_mount+0x581/0x30e0 [ 363.666111] ? do_raw_spin_unlock+0xa7/0x2f0 [ 363.670508] ? copy_mount_string+0x40/0x40 [ 363.674739] ? copy_mount_options+0x5f/0x380 [ 363.679135] ? rcu_read_lock_sched_held+0x108/0x120 [ 363.684136] ? kmem_cache_alloc_trace+0x616/0x780 [ 363.688965] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 363.694491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.700018] ? copy_mount_options+0x285/0x380 [ 363.704507] ksys_mount+0x12d/0x140 [ 363.708123] __x64_sys_mount+0xbe/0x150 [ 363.712082] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 363.717088] do_syscall_64+0x1b9/0x820 [ 363.720960] ? finish_task_switch+0x1d3/0x870 [ 363.725445] ? syscall_return_slowpath+0x5e0/0x5e0 [ 363.730362] ? syscall_return_slowpath+0x31d/0x5e0 [ 363.735282] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 363.740635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 363.745469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.750645] RIP: 0033:0x455ab9 [ 363.753818] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.773162] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.780860] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:06:03 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ioprio_get$pid(0x2, r0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = msgget$private(0x0, 0x80) msgsnd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="030000000000000046fc0bed1e544e42d17828ceff4a6ec54258918cbdc3b4f2e97cbed973c22609785dbd206acf0500000053d6c7cbb8a97be4a60132c6997bf912c099ff3ab73908e2a4355e0f1b59e892fc67e8730572090d5f57ed626b6aa55d5a3a1f538d442c40bd156bb5c7a59559598942217b9a45ed691512488299ef4d107c01f51759edec46bfc2436863fbd49a497388"], 0x96, 0x800) inotify_init() ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)="3bbeeddabf69688df3ee9206d3e749e2696ff05834bc276727e578c9d66a5797e1bfb8ee1317e6194ce6516f35d932059a201017c40b5cac47cfe86e3d93d96cd0170b446bd9cbcf3c56d304fa5aa82d487372fcae0ccc8db02f786c266f45d347009883566ed742e480b03c9b7f3a3ed352840f7ba8875773e5250e0349a51b34a186bef3abdf1ccfe80e6b5034871c457083e3889173fd2c11676413cda4de0c34eea8e81502dd") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000940)=[{&(0x7f0000000800)=""/104}, {&(0x7f0000000880)=""/73}, {&(0x7f0000002000)=""/4096}], 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r3}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) readv(r3, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000003b912773f37db14891b15a3b90dc0dbb7877af"]) ioctl$TIOCNXCL(r3, 0x540d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000340)={0x7, 0x200, 0x8000}) [ 363.788117] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 363.795368] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 363.802622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 363.809877] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000016 00:06:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x1, 0x0, 0x4}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4f, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) [ 363.855942] 9pnet: Couldn't grow tag array 00:06:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(r0, r0, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-twofish-3way,ghash)\x00'}, 0x58) eventfd2(0x0, 0x80001) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775b005fc81e5b3b60ced5c54dbb7e4d21da123d45f0da4ab4ef9b576ae9c4bc12e0dbe2c8c12fa4638ef7f2ab3a5d447438912ec6581ace31217a00a5570995cbfe0f244ad0c4ddf22323f9c16b918d2ced2248a101156294692", 0x6c6b3944) 00:06:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}) 00:06:03 executing program 3 (fault-call:8 fault-nth:23): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() clock_gettime(0x0, &(0x7f0000000300)={0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000001c0)={r2}, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000014) r3 = dup3(r0, r0, 0x80000) write$P9_RREADDIR(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000290100df440000"], 0xb) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x2}, 0xb) 00:06:04 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x48180, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0xeb, 0x0, 0x5, 0x5, 0x14, "fd897b70f8429e9fd95ea684fd3f4f4a14bcc56138fc9ce8df364dc1e9e387d50d42c34523fd8575bba4e5d2bcf5cd08d8554b140d8abc86b2cb37ad12b7d49d", "1d6b749fb29a02040b2495a2b6be0ff7775b363f8dc84bd5170a0a8ce09ea59748cf7a9ddd75fc69ccfe3dca655918157a4b6a4cb393114c992ade88becf231e", "b14472f9b0ad8529ace1406e57fe4a503d02fc6860891256273090ea0dd18d83", [0x20, 0x1]}) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)="e75240a34db157d86dc4cc9506e93fc338d12a5deebba43f3d0d9e4d899e8eb77543ce7c89a56dfbc1a1fd7e3e421a66b7f60b2a82cda73aecaeec0f88e4efeaa1a6fc62abac928d2b34ee255380dfc7651671", 0x53) 00:06:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 00:06:04 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='numa_maps\x00') readv(r2, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r2, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) [ 364.066159] FAULT_INJECTION: forcing a failure. [ 364.066159] name failslab, interval 1, probability 0, space 0, times 0 [ 364.077481] CPU: 1 PID: 24967 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 364.084845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.094196] Call Trace: [ 364.096793] dump_stack+0x1c9/0x2b4 [ 364.100426] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.105627] should_fail.cold.4+0xa/0x1a [ 364.109690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.114794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.120327] ? p9_free_req.isra.7+0x95/0x140 [ 364.124735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.130282] ? find_held_lock+0x36/0x1c0 [ 364.134359] ? check_same_owner+0x340/0x340 [ 364.138680] ? rcu_note_context_switch+0x730/0x730 [ 364.143607] ? kasan_check_write+0x14/0x20 [ 364.147841] __should_failslab+0x124/0x180 [ 364.152077] should_failslab+0x9/0x14 [ 364.155873] __kmalloc_track_caller+0x2c4/0x760 [ 364.160537] ? save_stack+0xa9/0xd0 [ 364.164165] ? save_stack+0x43/0xd0 [ 364.167787] ? kasan_kmalloc+0xc4/0xe0 [ 364.171669] ? kmem_cache_alloc_trace+0x152/0x780 [ 364.176513] ? v9fs_session_init+0x501/0x1a80 [ 364.181021] kstrdup+0x39/0x70 [ 364.184224] v9fs_session_init+0x501/0x1a80 [ 364.188573] ? v9fs_show_options+0x7e0/0x7e0 [ 364.192996] ? kasan_check_read+0x11/0x20 [ 364.197147] ? rcu_is_watching+0x8c/0x150 [ 364.201293] ? rcu_pm_notify+0xc0/0xc0 [ 364.205187] ? v9fs_mount+0x61/0x900 [ 364.208906] ? rcu_read_lock_sched_held+0x108/0x120 00:06:04 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x40000000000019e, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) [ 364.213924] ? kmem_cache_alloc_trace+0x616/0x780 [ 364.218772] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 364.224309] v9fs_mount+0x7c/0x900 [ 364.227852] mount_fs+0xae/0x328 [ 364.231221] vfs_kern_mount.part.34+0xdc/0x4e0 [ 364.235800] ? may_umount+0xb0/0xb0 [ 364.239428] ? _raw_read_unlock+0x22/0x30 [ 364.243581] ? __get_fs_type+0x97/0xc0 [ 364.247478] do_mount+0x581/0x30e0 [ 364.251023] ? copy_mount_string+0x40/0x40 [ 364.255264] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 364.260030] ? retint_kernel+0x10/0x10 [ 364.263924] ? copy_mount_options+0x1f0/0x380 [ 364.268421] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 364.273264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.278798] ? copy_mount_options+0x285/0x380 [ 364.283293] ksys_mount+0x12d/0x140 [ 364.286922] __x64_sys_mount+0xbe/0x150 [ 364.290897] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.295918] do_syscall_64+0x1b9/0x820 [ 364.299806] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.304734] ? syscall_return_slowpath+0x31d/0x5e0 [ 364.309668] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe 00:06:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0xa0, 0xfff, 0x2, 0x0, 0x0, [{r0}, {r0, 0x0, 0x3ff}]}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x208840) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0xfffffffffffffc01, 0x20, 0x8, 0x100000000, 0x1f, 0x17}, 0xf41, 0xf839, 0x1, 0x8, 0x8001, "ead41b3dd61e9051ec78fb13c3c3dad64b021a80cdd3ed2764a0781746d3e04b27af00ec2b6d6a11f6c602181ff49a7326b46168dadddefc82e796f4d6bca644b5ce3f70e7e74c9800f77ab8782ef6f5735a68c886a16f81026eee611ab4d4fd18e6e14772d89cefb73e3eccc25e63c85adb21e5f66e8b05d5039a9125fc371e"}) syz_read_part_table(0x0, 0x1, &(0x7f0000000700)=[{&(0x7f0000001300), 0xffffffffffffffb0}]) [ 364.315036] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.319887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.325075] RIP: 0033:0x455ab9 [ 364.328254] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.347618] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.355325] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:06:04 executing program 3 (fault-call:8 fault-nth:24): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 364.362590] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 364.369852] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 364.377121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 364.384301] Process accounting resumed [ 364.384384] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000017 [ 364.418920] Process accounting resumed [ 364.442369] Process accounting resumed [ 364.513348] Process accounting resumed [ 364.557616] Process accounting resumed [ 364.573840] FAULT_INJECTION: forcing a failure. [ 364.573840] name failslab, interval 1, probability 0, space 0, times 0 [ 364.585192] CPU: 1 PID: 24990 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 364.592550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.601901] Call Trace: [ 364.604496] dump_stack+0x1c9/0x2b4 [ 364.608133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.613326] ? __save_stack_trace+0x8d/0xf0 [ 364.617659] should_fail.cold.4+0xa/0x1a [ 364.621724] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.626829] ? save_stack+0x43/0xd0 [ 364.630452] ? kasan_kmalloc+0xc4/0xe0 [ 364.634335] ? __kmalloc_track_caller+0x14a/0x760 [ 364.639174] ? kstrdup+0x39/0x70 [ 364.642542] ? v9fs_session_init+0x501/0x1a80 [ 364.647037] ? v9fs_mount+0x7c/0x900 [ 364.650754] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 364.655509] ? do_mount+0x581/0x30e0 [ 364.659221] ? ksys_mount+0x12d/0x140 [ 364.663028] ? __x64_sys_mount+0xbe/0x150 [ 364.667181] ? do_syscall_64+0x1b9/0x820 [ 364.671247] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.676621] ? find_held_lock+0x36/0x1c0 [ 364.680708] ? check_same_owner+0x340/0x340 [ 364.685034] ? rcu_note_context_switch+0x730/0x730 [ 364.689972] __should_failslab+0x124/0x180 [ 364.694212] should_failslab+0x9/0x14 [ 364.698014] __kmalloc+0x2c8/0x760 [ 364.701569] ? match_strdup+0x5e/0xa0 [ 364.705383] match_strdup+0x5e/0xa0 [ 364.709018] v9fs_session_init+0x797/0x1a80 [ 364.713359] ? v9fs_show_options+0x7e0/0x7e0 [ 364.717775] ? rcu_is_watching+0x8c/0x150 [ 364.721925] ? rcu_pm_notify+0xc0/0xc0 [ 364.725822] ? v9fs_mount+0x61/0x900 [ 364.729545] ? rcu_read_lock_sched_held+0x108/0x120 [ 364.734574] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 364.740120] v9fs_mount+0x7c/0x900 [ 364.743673] mount_fs+0xae/0x328 [ 364.747046] vfs_kern_mount.part.34+0xdc/0x4e0 [ 364.751633] ? may_umount+0xb0/0xb0 [ 364.755260] ? _raw_read_unlock+0x22/0x30 [ 364.759409] ? __get_fs_type+0x97/0xc0 [ 364.763302] do_mount+0x581/0x30e0 [ 364.766849] ? copy_mount_string+0x40/0x40 [ 364.771087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 364.774883] Process accounting resumed [ 364.775846] ? retint_kernel+0x10/0x10 [ 364.775869] ? copy_mount_options+0x213/0x380 [ 364.775887] ? copy_mount_options+0x213/0x380 [ 364.775904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.775916] ? copy_mount_options+0x285/0x380 [ 364.775936] ksys_mount+0x12d/0x140 00:06:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0xcd1, 0x7, 0x6e, 0x100000001, 0x1000, 0x9, 0x0, 0xf3, 0x7, 0x1ff, 0x401, 0x8001, 0x7, 0x8, 0x1, 0x3], 0xf000, 0x2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0x80000001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x0, 0x2, 0x80}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r3, 0x127b, &(0x7f0000000240)) 00:06:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}) [ 364.806464] __x64_sys_mount+0xbe/0x150 [ 364.810446] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 364.815458] do_syscall_64+0x1b9/0x820 [ 364.819346] ? finish_task_switch+0x1d3/0x870 [ 364.823846] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.828784] ? syscall_return_slowpath+0x31d/0x5e0 [ 364.833723] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 364.839099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.843955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.849141] RIP: 0033:0x455ab9 [ 364.852324] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.872020] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.879728] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 364.886998] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 364.894265] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 364.901534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 00:06:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ed277a4200100360070") r1 = socket(0x1e, 0x1000000000001, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f000016cf61)}, 0x0) recvmsg$kcm(r1, &(0x7f0000008000)={&(0x7f0000c1d000)=@ax25, 0x10, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1, &(0x7f0000c21000)}, 0x0) clock_gettime(0x0, &(0x7f0000003980)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000035c0)=[{{&(0x7f0000002880)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002bc0)=""/60, 0x3c}], 0x1000000000000085, &(0x7f0000002c80)=""/123, 0x18}}, {{&(0x7f0000002d00)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d80)=""/58, 0x3a}], 0x1, 0x0, 0x1f}}], 0x3fffffffffffd23, 0x3, &(0x7f0000001340)={0x0, r2+30000000}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) 00:06:04 executing program 3 (fault-call:8 fault-nth:25): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) [ 364.908804] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000018 00:06:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x900000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYPTR, @ANYPTR64], @ANYPTR64=&(0x7f00000000c0)=ANY=[]]]) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x7fc, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000500), 0x2) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff7f, 0x3, &(0x7f0000000440)=[{&(0x7f0000000240)="47111c19e31a058a9f6cc82452d2e13346397bf58b6778598e596566b238a80e85335ef42a5b7a37682c3debab72601d9a6a0ef517d4c91dc6ea028b9ecac59e33fe78c8a23609f2d4583b6e55b3175e6bc587f4aeff3af854513a3f2752", 0x5e, 0x100000001}, {&(0x7f0000000300)="fbccfc44d20967292a3de66d12d873a22432074ab1ebf25c240afbbd51838ac08a69f669d57f0af76b5bed66d0526ff82bffc9f92149ea324e007b57d4f7c4756a8c4cbac0041ab9c9f0aa4c9fea748c35fe5a523e574ee37174a490db665d2bfc5ecdcc617cfcb0c991da1a266b11f12e721a3469c256c163db7e7d86973db8b19174f2349c3942f8072edb7172bf7cd9", 0x91, 0x9}, {&(0x7f00000003c0)="9839be80148095e6731c2c4585c21a040e7fb8a80d330d9d6c62c5b4ace9b5acf70c736ef03b502864b6cac99bd84f1f57a84c09b9e129dc5054c9b2dc1339dda35632e2d3e80823beb7f41c", 0x4c, 0x7fff}], 0x8020, &(0x7f00000004c0)={[{@noenospc_debug='noenospc_debug', 0x2c}, {@discard='discard', 0x2c}, {@notreelog='notreelog', 0x2c}]}) r1 = semget(0x2, 0x3, 0x400) semtimedop(r1, &(0x7f0000000540)=[{0x3, 0x81, 0x1000}, {0x1, 0x10001, 0x1000}, {0x4, 0x569f, 0x1000}], 0x3, &(0x7f0000000580)) signalfd4(r0, &(0x7f00000000c0)={0x3}, 0x8, 0x80000) 00:06:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:06:05 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x2}, &(0x7f0000000100)=0x8) close(r1) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x61, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0xffffff1b}], 0x1, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={&(0x7f0000000400)=@rc={0x1f}, 0xa, &(0x7f00000004c0), 0x0, &(0x7f00000019c0)}, 0x80d4) [ 365.093555] FAULT_INJECTION: forcing a failure. [ 365.093555] name failslab, interval 1, probability 0, space 0, times 0 [ 365.104864] CPU: 0 PID: 25010 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 365.112225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.121570] Call Trace: [ 365.124160] dump_stack+0x1c9/0x2b4 [ 365.127789] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.132989] should_fail.cold.4+0xa/0x1a [ 365.137047] ? find_held_lock+0x36/0x1c0 [ 365.141109] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.146219] ? lock_downgrade+0x8f0/0x8f0 [ 365.150371] ? find_held_lock+0x36/0x1c0 [ 365.154451] ? check_same_owner+0x340/0x340 [ 365.158769] ? __save_stack_trace+0x8d/0xf0 [ 365.163088] ? rcu_note_context_switch+0x730/0x730 [ 365.168023] __should_failslab+0x124/0x180 [ 365.172257] should_failslab+0x9/0x14 [ 365.176058] kmem_cache_alloc_trace+0x2cb/0x780 [ 365.180724] ? save_stack+0x43/0xd0 [ 365.184352] ? __kasan_slab_free+0x11a/0x170 [ 365.188760] ? kasan_slab_free+0xe/0x10 [ 365.192734] ? kfree+0xd9/0x260 [ 365.196013] ? v9fs_session_init+0xd5b/0x1a80 [ 365.200502] ? v9fs_mount+0x7c/0x900 [ 365.204214] ? mount_fs+0xae/0x328 [ 365.207754] p9_fid_create+0x98/0x4c0 [ 365.211554] ? kasan_check_read+0x11/0x20 [ 365.215700] ? p9_client_destroy+0x610/0x610 [ 365.220104] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 365.224684] ? kasan_check_write+0x14/0x20 [ 365.228917] p9_client_attach+0xbc/0x860 [ 365.232981] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 365.238083] ? debug_check_no_obj_freed+0x30b/0x595 [ 365.243095] ? p9_client_walk+0xab0/0xab0 [ 365.247246] ? trace_hardirqs_off+0xd/0x10 [ 365.251479] ? quarantine_put+0x10d/0x1b0 [ 365.255625] ? kfree+0x111/0x260 [ 365.258991] ? v9fs_session_init+0xd5b/0x1a80 [ 365.263488] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.268507] v9fs_session_init+0xf62/0x1a80 [ 365.272824] ? v9fs_session_init+0xf62/0x1a80 [ 365.277332] ? v9fs_show_options+0x7e0/0x7e0 [ 365.281743] ? rcu_is_watching+0x8c/0x150 [ 365.285888] ? rcu_pm_notify+0xc0/0xc0 [ 365.289782] ? v9fs_mount+0x61/0x900 [ 365.293491] ? rcu_read_lock_sched_held+0x108/0x120 [ 365.298509] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 365.304048] v9fs_mount+0x7c/0x900 [ 365.307591] mount_fs+0xae/0x328 [ 365.310965] vfs_kern_mount.part.34+0xdc/0x4e0 [ 365.315544] ? may_umount+0xb0/0xb0 [ 365.319166] ? _raw_read_unlock+0x22/0x30 [ 365.323309] ? __get_fs_type+0x97/0xc0 [ 365.327198] do_mount+0x581/0x30e0 [ 365.330738] ? copy_mount_string+0x40/0x40 [ 365.334977] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.339739] ? retint_kernel+0x10/0x10 [ 365.343634] ? __sanitizer_cov_trace_const_cmp2+0x20/0x20 [ 365.349172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.354707] ? copy_mount_options+0x285/0x380 [ 365.359204] ksys_mount+0x12d/0x140 [ 365.362839] __x64_sys_mount+0xbe/0x150 [ 365.366814] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 365.371838] do_syscall_64+0x1b9/0x820 [ 365.375729] ? finish_task_switch+0x1d3/0x870 [ 365.380227] ? syscall_return_slowpath+0x5e0/0x5e0 [ 365.385159] ? syscall_return_slowpath+0x31d/0x5e0 00:06:05 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000001a7, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) [ 365.390093] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 365.395461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 365.400312] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.405498] RIP: 0033:0x455ab9 [ 365.408677] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.428037] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 365.435745] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 365.443010] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 365.450279] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 365.457543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 365.464812] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 0000000000000019 00:06:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13", 0x93}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xc698}) r1 = syz_open_pts(r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}) 00:06:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 365.581512] FAT-fs (loop4): Unrecognized mount option "€" or missing value 00:06:05 executing program 3 (fault-call:8 fault-nth:26): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000080)={{0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}}, 0x20) alarm(0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3, 0x5, 0xfffffffffffff767, 0x9, 0x9e21, 0x1, 0xfffffffffffffff8, 0xffff, 0x100000000, 0x81, 0x1}, 0xb) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x7}, 0x4) 00:06:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x1) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000001000)=""/4096, 0x1000}], 0x4) 00:06:05 executing program 7: syz_mount_image$xfs(&(0x7f0000001640)='xfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002a00)) 00:06:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000d13329000cb1a92374ff12000000fcffffff0100"], 0x14}, 0x1}, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x200000000) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa}]}, &(0x7f0000000200)=0x10) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0xeb, 0x0, &(0x7f0000000140), 0x8000, &(0x7f0000000280)='md5sumw\x00') 00:06:05 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0xdea0, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e22, @loopback=0x7f000001}, 0x100, 0x8, 0x7, 0x101, 0x927, &(0x7f00000000c0)='tunl0\x00', 0x95f, 0x7, 0x8c7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02132d01020000008916400000000000"], 0x10}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021200001100000026bd700700009887000000ad6f10babc007900000008001200030000000000e5003800000006003200030800000900000200000000ac1414bb000000000000000000000000ac14142c0000000000000000000000000400040005000000f8450e1d6e43071f000000000700003f00000000000000039d4d56910b000500000001"], 0x88}, 0x1}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000200)) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000340)) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 00:06:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 365.938725] FAULT_INJECTION: forcing a failure. [ 365.938725] name failslab, interval 1, probability 0, space 0, times 0 [ 365.950043] CPU: 1 PID: 25054 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 365.957408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.966762] Call Trace: [ 365.969353] dump_stack+0x1c9/0x2b4 [ 365.972978] ? dump_stack_print_info.cold.2+0x52/0x52 [ 365.978164] ? __save_stack_trace+0x8d/0xf0 [ 365.982488] should_fail.cold.4+0xa/0x1a [ 365.986543] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 365.991635] ? save_stack+0x43/0xd0 [ 365.995247] ? kasan_kmalloc+0xc4/0xe0 [ 365.999118] ? __kmalloc_track_caller+0x14a/0x760 [ 366.003951] ? kstrdup+0x39/0x70 [ 366.007306] ? v9fs_session_init+0x501/0x1a80 [ 366.011788] ? v9fs_mount+0x7c/0x900 [ 366.015487] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 366.020227] ? do_mount+0x581/0x30e0 [ 366.023928] ? ksys_mount+0x12d/0x140 [ 366.027715] ? __x64_sys_mount+0xbe/0x150 [ 366.031849] ? do_syscall_64+0x1b9/0x820 [ 366.035896] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.041252] ? find_held_lock+0x36/0x1c0 [ 366.045319] ? check_same_owner+0x340/0x340 [ 366.049628] ? rcu_note_context_switch+0x730/0x730 [ 366.054551] __should_failslab+0x124/0x180 [ 366.058776] should_failslab+0x9/0x14 [ 366.062560] __kmalloc+0x2c8/0x760 [ 366.066096] ? match_strdup+0x5e/0xa0 [ 366.069890] match_strdup+0x5e/0xa0 [ 366.073505] v9fs_session_init+0x797/0x1a80 [ 366.077830] ? v9fs_show_options+0x7e0/0x7e0 [ 366.082230] ? rcu_is_watching+0x8c/0x150 [ 366.086363] ? rcu_pm_notify+0xc0/0xc0 [ 366.090246] ? v9fs_mount+0x61/0x900 [ 366.093950] ? rcu_read_lock_sched_held+0x108/0x120 [ 366.098962] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 366.104489] v9fs_mount+0x7c/0x900 [ 366.108033] mount_fs+0xae/0x328 [ 366.111396] vfs_kern_mount.part.34+0xdc/0x4e0 [ 366.115966] ? may_umount+0xb0/0xb0 [ 366.119579] ? _raw_read_unlock+0x22/0x30 [ 366.123725] ? __get_fs_type+0x97/0xc0 [ 366.127603] do_mount+0x581/0x30e0 [ 366.131136] ? copy_mount_string+0x40/0x40 [ 366.135365] ? copy_mount_options+0x5f/0x380 [ 366.139760] ? rcu_read_lock_sched_held+0x108/0x120 [ 366.144762] ? kmem_cache_alloc_trace+0x616/0x780 [ 366.149593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 366.155115] ? _copy_from_user+0xdf/0x150 [ 366.159250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.164773] ? copy_mount_options+0x285/0x380 [ 366.169258] ksys_mount+0x12d/0x140 [ 366.172876] __x64_sys_mount+0xbe/0x150 [ 366.176836] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 366.181841] do_syscall_64+0x1b9/0x820 [ 366.185716] ? syscall_return_slowpath+0x5e0/0x5e0 [ 366.190634] ? syscall_return_slowpath+0x31d/0x5e0 [ 366.195552] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 366.200907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 366.205744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.210916] RIP: 0033:0x455ab9 [ 366.214089] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:06:06 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002200000007d59e000000000000009500000000000000"], &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x36, 0x9d, &(0x7f0000000000)="e460019234060dc106621abc86dd6a00000000072ceb305660319056115082553800800000e88e4da34964c28d51b4e12642000000e8", &(0x7f0000000040)=""/157}, 0x28) [ 366.233418] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.241114] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 366.248370] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 366.255622] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 366.262881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 366.270137] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001a 00:06:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xffffffffffffff5d, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose='loose', 0x2c}]}}) 00:06:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) 00:06:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-camellia-asm)\x00'}, 0xffffffffffffff36) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000003700)={&(0x7f0000000100)=@ax25, 0x80, &(0x7f00000035c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/47, 0x2f}], 0x2, &(0x7f0000003640)=""/186, 0xba}, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0xaa, 0x9, "d1e5356880d064da44b2b2463c019ccb1214617d7b0d20fb6312b1505b7a7499343493570e594f802d1c28b6988ae889c54a4121d4d50e68abf829da5140d99454d8576aff87ec6282433551bb22b904016723d26014cc0898233b0b3ba8a9f28d9a14bed303eaed5601daaa6a2e3243c435a53978d26069d8d83eb098e07b6652d3d5840fb692a14833606034bf057519e28b35c06572930d828a4e5fd76e4bd355"}, &(0x7f0000000240), 0x0) [ 366.383267] XFS (loop7): Invalid superblock magic number 00:06:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000189, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:06:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x296) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xf67d, 0x8000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r2, 0x412, 0x70bd2a, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0), 0x191) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x80) connect$netlink(r3, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) 00:06:06 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x32200) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x5, &(0x7f0000000080)={0x8}, 0x8) finit_module(r0, &(0x7f00000000c0)='1\x00', 0x3) ioctl$TIOCEXCL(r0, 0x540c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0x20000008}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xed, 0x1, 0x30000000000, 0xf2}, {0x6, 0x1, 0x8, 0x3ff}]}) getpeername$netlink(r2, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000280), 0x4) set_tid_address(&(0x7f00000002c0)) finit_module(r2, &(0x7f0000000300)='1\x00', 0x1) personality(0x2000000) accept$alg(r2, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000340)) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000480)={0x1f, 0x20, 0xf6, &(0x7f0000000380)="b447cd30518d6a7ca1535c9f171412d6a449c05a0937b885468d95795f154e5f3123eec11ad38c4a1e9cd78e629e81b61e4028888b55770efaccee4dbbac56bea33ef866a9b52bf999f5bd1d781bb04e48257617145e1d9c08da310c08fdffe9b0edb3f6c47586c5c667ff14a45fbc345965de03e4788fd498a3c4a64594dd4c57138a1d56d83cc3a50bc16688cb653cc6a7253568a820532adc27b0e83c25a47d9b85d20ed20c4e611a9bcbc93a90c2c37ae2e3a46124973593ee3e708d06a5c319e922db3849379e67df9e631af510d0b3570eacb2075e4e7a70d53ce39743353960f93ef3de659fc92700e31e3e38ef34f03e7cc7"}) lseek(r0, 0x0, 0x4) ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000004c0)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000500)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000540)={0xffffffffffffffff}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0xe0000, 0x0) ioctl$VT_RELDISP(r0, 0x5605) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000005c0)) r5 = getpid() ptrace$poke(0xffffffffffffffff, r5, &(0x7f0000000600), 0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000640)={0x0, 0x6}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000006c0)={r6, 0x7}, &(0x7f0000000700)=0x8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000780)={0x6, 0xe22, 0x7}) 00:06:06 executing program 7: r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() epoll_create1(0x80000) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/117, 0x75}, {&(0x7f0000000100)=""/124, 0x7c}], 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/226, 0xe2}], 0x1, 0x0) process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x7ffff000}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) migrate_pages(r1, 0x7, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x44baaabd) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:06:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa1a00e9b7583119919f2f00001c000f0000fda09078ac2314aaac14142b0000000000089078"], &(0x7f00000000c0)) 00:06:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) 00:06:06 executing program 3 (fault-call:8 fault-nth:27): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:06 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x400000000000000, 0x4010, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r1, &(0x7f00000f9000)=[{&(0x7f0000001000)=""/2560, 0xa00}], 0x1) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x58c8a187, 0xaaaaaaaaaaaaabb, &(0x7f0000000140)=[{&(0x7f00000000c0)="3a8bda97fd2fe3208f14c2e2a7dc888e73ef2edbe56925618767f81262b2e001a7a219ca6e4c8a5a1a7440f32a4219f3b75098992784c0d14e3b2a445d57dbe26eeb72786eb50f3fadbf7aa7c5735ebf0bb67a01afa05e8ea11c83e934fd56985c1681dc0e14eb3884b48a70a27d15be6477e3603fcff7c0372a89cb5cdd0f", 0x7f, 0x414}], 0x200000, 0x0) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) 00:06:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x8000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x18a00, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x4, 0x4, 0x10000005, 0x0, 0x1}, 0x16) connect$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xf674, "53a38b4f9ceee46bc2422fde284698e571d38ddf8b18a7c3efc68f79a8797e0d84fdcda55f318db1cf3be183a98441d44370cd32080d5b5a6b5ca47e7ee1fe", 0x15}, 0x60) 00:06:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@loopback, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fchmod(r0, 0x100) r5 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xd09, 0x125001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x5, 0x6, 0x6e}, 0x10) write$P9_RSTATFS(r5, &(0x7f0000000200)={0x43, 0x9, 0x1, {0x0, 0x0, 0x3f, 0x48e, 0x4, 0x3f6, 0x400, 0x0, 0x100}}, 0x43) sendmsg$nl_netfilter(r5, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x434, 0x3, 0x2, 0x10, 0x70bd26, 0x25dfdbfc, {0xb, 0x0, 0x8}, [@generic="adb2de63f41de4638064a3e770a8226cd3f12c7bd8658eda218ea8f0654eb2faccf66009b411f8184d9e04de10345be692a0f10ce50c1ebcef2edc14329ec816f4e32ea4aaa206a6fc89b0e1e8f8987107893d6e82e05820b4211505dd79c310ee3d849e0ee68a0864f6963e1858010712c9d5595ced8fa85ced639a5d062564924e32bc1d2db0a9da33174ea6b40e3cc5cff1de3c81191d15fb7c2da32d1a5e19f38e2b97f341586d3b27a45c276072416f6eb9695c8475fb17b57b5466674e6afe3911582ada", @generic="28a9d72a7e6ad5c07022e8d4a84b0176e35b5e9a3094770487f69f80103c5fe071092e80b46db260db97cf0cd5019db38d77339788587e4dcd38594b538842f1ea4b807e9d32b28e97fe749abf3b32fa1751052876f480bdb529309288026d425e77b6eef9ce9d367030a44ff6ae23bb8f44b6b6ac205da451a1e6c2a13377a4cec103b07fc465152947aebf9185b3ec49334c25c6e904975a71c916e42fd8f45667be2b7ef81bad3ffe2003bea5305833af5c29", @generic="3135e5645519e3ae251ee7e3a6271b6bd1585cac7d56580d936c0ffaed4e2d683d8ccf1e3e41a0bff4249387da3e7ae6361bdfc2c99c91aaf58540367c51ddaf9ad4e191988a7ce3221952d83157460025ac785fe750398f2474fb71a117b16cfcbeb36f438b40ffd43eef90c545981dce97e0a6d3f11445b8555e6d8f1d643ddbdd9336c4456bc59d3c19a1db9d48ec9ed7b2a5f8b0552c042059d5854318785aea863297da7f", @nested={0x88, 0x40, [@generic="a868bbeb40e5c1cbf6b7309aab237ff7d0f0274f05f184093d555fe78daa4c3297006fedb1a9ee95c2024b782c7744781e64922311e957d3badb6e919ada301233d657f105bd81e4bcb570254bef7cb6f310191c0c44353644e4b70f5eb1993e1af1831109128a395185acbd1cff9a75", @typed={0x14, 0x11, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, @generic="ab0eb0765ef5c1d5fa010d4aeb2cb76bd52ac54cd2008740349d99378363a684f430cf2141e76a46bd7759fe96ea9432e2caa60f902a6ca6721baf7fdddd815edafb348960a13c7b01e21dab245f8cabf92ed4e82b5f506d5cb285ce025fd3ab9446efbb3a40827b189080092a074625af30dd7f6d9f0954aef78453f018d9e87cd35adae3dcf64cdd9532e0fa0a56d463102879f74b2057cbf9776b9e4d0bff17c7dcc528ed", @nested={0x4, 0x51}, @typed={0x4, 0x2f}, @typed={0xc, 0x69, @str='bridge0\x00'}, @generic="631157905a42c55f5a5f481cf99aabaf3ec28260ac5b4306c83fc8d379ecfa91d86d03033a24dd93b789ade04b3d010570223128e124c28f39d83f2cf1c17ace7c63ed1017742595a537ea183cb82c8c4307", @generic="f62e84f20258baf090c665492b95db695885e904f00c882ea11d801901bcec8e8e47fd689ebed9b66d09feac451a0d2ef83975292096600f89bd5b250b96a88abcf87079d655d5ae932ed7abb1faa78c25de7a371d639ccdf1c2d84f2a2df39e0f182db8fcc37e4f1f"]}, 0x434}, 0x1, 0x0, 0x0, 0x24004084}, 0x40) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000780)=0xfd, 0x4) add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000840), &(0x7f0000000880)=0x4) write$P9_RREADDIR(r5, &(0x7f00000008c0)={0x87, 0x29, 0x1, {0x5, [{{0x20, 0x8, 0x3}, 0x4, 0x4ca, 0x7, './file0'}, {{0x4, 0x4, 0x8}, 0x101, 0x6, 0x7, './file0'}, {{0x80, 0x4, 0x1}, 0x3eab, 0x1, 0x7, './file0'}, {{0x12, 0x3, 0x5}, 0x9, 0x7, 0x7, './file0'}]}}, 0x87) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0xd141, 0x0, 0x8}) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000a00)=@add_del={0x2, &(0x7f00000009c0)='veth1_to_bridge\x00', 0x1ff}) r7 = accept4$packet(r5, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000a80)=0x14, 0x0) uname(&(0x7f0000000ac0)=""/4096) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001b00)={0x0, 0x0, 0x0}, &(0x7f0000001b40)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000001f00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b80)=@delpolicy={0x340, 0x14, 0x12, 0x2, 0x25dfdbfb, {{@in=@broadcast=0xffffffff, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e23, 0x0, 0x4e23, 0x6, 0x2, 0x0, 0x20, 0x0, r8, r9}, 0x6e6bb6}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd29, 0x70bd2c, 0x70bd2a, 0x70bd25, 0xdc6, [0x8, 0x7, 0x0, 0x0, 0x2, 0x7fff, 0x7af, 0xb8]}}, @algo_auth_trunc={0xec, 0x14, {{'crc32\x00'}, 0x500, 0x80, "f7c683dbb9bdfdce417d56b21d7a4491784df4a98d7ccc4173043a417414d0560332498fa818af62d3e06100d4fbcdc9bb081939ad14ddd02d9f475c454b106e2b93c230a7095a7fd0eb9e0543884717ff59a4a3fd4bbc9393e9e8ce459f981db76e3bd4b53f8b6eae4d8e15f96ce5cfb459f35612b13dee4913e20dfd40e3c64f379547f1f56ca76068c3fb3562edf531c801520e67e9b12b7aed91d6694b1f"}}, @ipv6_hthresh={0x8, 0x4, {0xf, 0x74}}, @algo_aead={0x138, 0x12, {{'rfc7539esp(xts-twofish-3way,sha512_mb)\x00'}, 0x760, 0xc0, "45bb4ef4a6cc2e92990bbbd15d2558d4a74cac2567451039ae2fabe1bff467a7fd2a938c1d1d910ebc13f1bd312d41c3439c891fb141bbee6697f7926336c6fcc957d3c3cc6fc08d914e291c81c7da85a2fefd993b8b9f34f497e39a150c55eba5647888c40d98be9d73a45f1a25b6f6d36041b8f207580f788a25d92472e1804b32f4be5b714b65330459b9dd61107210a2a423fb23f338628bb405470f0b4422f6b1c078e07194d3a34a2e17a40c51aea859afc85867b08a8eae198b0f7c3d1d02da819e97df6a6cfc5827a1be094d0273dd2170292d5fe248e8625e84a0b3d9c8b71eaee3a48e87902ccc"}}, @sec_ctx={0x6c, 0x8, {0x65, 0x8, 0x1, 0x6, 0x5d, "c1aad1e6193eb51cba152d05c1decbf5a8df605e872a22138ecc787d77af91914502ae41ea0367d14271008f2d113642ed261265532280043adc2b0d7c6c8601a940c9cb896b68c2bdc77d6280ed38b8aefc84041c80a059622ab114cf"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e23, @in=@loopback=0x7f000001}}]}, 0x340}, 0x1, 0x0, 0x0, 0x40}, 0x84) fcntl$getownex(r3, 0x10, &(0x7f0000001f40)) mount$fuseblk(&(0x7f0000001f80)='/dev/loop0\x00', &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='fuseblk\x00', 0x800, &(0x7f0000002040)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1a00}, 0x2c}, {@max_read={'max_read', 0x3d, 0x2}, 0x2c}, {@default_permissions='default_permissions', 0x2c}, {@blksize={'blksize', 0x3d, 0x1000}, 0x2c}, {@max_read={'max_read', 0x3d, 0x8026}, 0x2c}, {@max_read={'max_read', 0x3d, 0x92c}, 0x2c}]}}) write$P9_RSTATFS(r5, &(0x7f0000002180)={0x43, 0x9, 0x2, {0x1, 0x0, 0xffffffff, 0x100000000, 0x9, 0x101, 0x7, 0x4}}, 0x43) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000002200), &(0x7f0000002240)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002280)={0x1000, 0x8000, 0x4, 0x40d4, r6}, &(0x7f00000022c0)=0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000002300), 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002340), &(0x7f0000002380)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)={0x4, 0x10001, 0x80000000, 0x7, 0x2, 0xffffffffffffff9c, 0xff}, 0x2c) poll(&(0x7f0000002400)=[{r2, 0x5}, {r4, 0x8080}, {r2, 0x84}], 0x3, 0x3f) 00:06:07 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x4, 0x0, 0x0, [], {0x0, 0x6, "cb155d", 0x0, 0x2f, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "8df06558eb6a17d1"}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) 00:06:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}) [ 366.974956] FAULT_INJECTION: forcing a failure. [ 366.974956] name failslab, interval 1, probability 0, space 0, times 0 [ 366.986358] CPU: 1 PID: 25136 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 366.993716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.003067] Call Trace: [ 367.005661] dump_stack+0x1c9/0x2b4 [ 367.009304] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.014504] ? __save_stack_trace+0x8d/0xf0 [ 367.018845] should_fail.cold.4+0xa/0x1a [ 367.022917] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.028024] ? save_stack+0x43/0xd0 [ 367.031649] ? kasan_kmalloc+0xc4/0xe0 [ 367.035522] ? __kmalloc_track_caller+0x14a/0x760 [ 367.040353] ? kstrdup+0x39/0x70 [ 367.043707] ? v9fs_session_init+0x501/0x1a80 [ 367.048205] ? v9fs_mount+0x7c/0x900 [ 367.051916] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 367.056675] ? do_mount+0x581/0x30e0 [ 367.060391] ? ksys_mount+0x12d/0x140 [ 367.064195] ? __x64_sys_mount+0xbe/0x150 [ 367.068346] ? do_syscall_64+0x1b9/0x820 [ 367.072412] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.077785] ? find_held_lock+0x36/0x1c0 [ 367.081874] ? check_same_owner+0x340/0x340 [ 367.086205] ? rcu_note_context_switch+0x730/0x730 [ 367.091145] __should_failslab+0x124/0x180 [ 367.095390] should_failslab+0x9/0x14 [ 367.099193] __kmalloc+0x2c8/0x760 [ 367.102746] ? match_strdup+0x5e/0xa0 [ 367.106543] match_strdup+0x5e/0xa0 [ 367.110162] v9fs_session_init+0x797/0x1a80 [ 367.114489] ? v9fs_show_options+0x7e0/0x7e0 [ 367.118893] ? rcu_is_watching+0x8c/0x150 [ 367.123033] ? rcu_pm_notify+0xc0/0xc0 [ 367.126916] ? v9fs_mount+0x61/0x900 [ 367.130615] ? rcu_read_lock_sched_held+0x108/0x120 [ 367.135623] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 367.141153] v9fs_mount+0x7c/0x900 [ 367.144689] mount_fs+0xae/0x328 [ 367.148052] vfs_kern_mount.part.34+0xdc/0x4e0 [ 367.152626] ? may_umount+0xb0/0xb0 [ 367.156241] ? _raw_read_unlock+0x22/0x30 [ 367.160374] ? __get_fs_type+0x97/0xc0 [ 367.164256] do_mount+0x581/0x30e0 [ 367.167797] ? copy_mount_string+0x40/0x40 [ 367.172032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.176781] ? retint_kernel+0x10/0x10 [ 367.180662] ? copy_mount_options+0x1f0/0x380 [ 367.185145] ? copy_mount_options+0x1fa/0x380 [ 367.189631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.195152] ? copy_mount_options+0x285/0x380 [ 367.199637] ksys_mount+0x12d/0x140 [ 367.203255] __x64_sys_mount+0xbe/0x150 [ 367.207217] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 367.212224] do_syscall_64+0x1b9/0x820 [ 367.216095] ? finish_task_switch+0x1d3/0x870 [ 367.220576] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.225491] ? syscall_return_slowpath+0x31d/0x5e0 [ 367.230413] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 367.235767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.240606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.245780] RIP: 0033:0x455ab9 [ 367.248952] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.268291] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:06:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb}, 0x1c) ioctl(r0, 0x5, &(0x7f00000000c0)="3ec15c7f9bdea32bef74e379a45b71061a65fb5d3fca10e4bf3f64b0e66b6baf0394b371580d8f62ea9233171d474c2a604d7605a9b843086c9e7f5493d263aad2055422d0bc0717e08bebf5ba3ed4b90b18a3564d7d29ed17bc897b3a8c8e23de7dcd753f5aa1aaf078b47dcbf512dce6497d80eecd2586f8607d23c5c2ddea188ff41e0abf0ad54f64e0e89bb29750f674274a138078252f9be9e60e3dcfa06f8066c1dc064ec61e718fbe7ddcd20100e8846c519765f4f972e1039986a9d8564312fda0992e3db4") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco={0x1f}, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2={0x1f}, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) r2 = dup2(r1, r1) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0xc0045103, &(0x7f0000a07fff)) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11}, 0x14) [ 367.275984] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 367.283238] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 367.290490] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 367.297742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 367.304997] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001b 00:06:07 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}, 0x1}) 00:06:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 00:06:07 executing program 3 (fault-call:8 fault-nth:28): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:07 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000064, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) [ 367.619408] FAULT_INJECTION: forcing a failure. [ 367.619408] name failslab, interval 1, probability 0, space 0, times 0 [ 367.630722] CPU: 1 PID: 25170 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 367.638088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.647438] Call Trace: [ 367.650038] dump_stack+0x1c9/0x2b4 [ 367.653682] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.658896] should_fail.cold.4+0xa/0x1a [ 367.662968] ? find_held_lock+0x36/0x1c0 [ 367.667047] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.672165] ? lock_downgrade+0x8f0/0x8f0 [ 367.676331] ? find_held_lock+0x36/0x1c0 [ 367.680418] ? check_same_owner+0x340/0x340 [ 367.684752] ? __save_stack_trace+0x8d/0xf0 [ 367.689081] ? rcu_note_context_switch+0x730/0x730 [ 367.694020] __should_failslab+0x124/0x180 [ 367.698267] should_failslab+0x9/0x14 [ 367.702073] kmem_cache_alloc_trace+0x2cb/0x780 [ 367.706747] ? save_stack+0x43/0xd0 [ 367.710378] ? __kasan_slab_free+0x11a/0x170 [ 367.714805] ? kasan_slab_free+0xe/0x10 [ 367.718787] ? kfree+0xd9/0x260 [ 367.722071] ? v9fs_session_init+0xd5b/0x1a80 [ 367.726574] ? v9fs_mount+0x7c/0x900 [ 367.730291] ? mount_fs+0xae/0x328 [ 367.733843] p9_fid_create+0x98/0x4c0 [ 367.737651] ? kasan_check_read+0x11/0x20 [ 367.741807] ? p9_client_destroy+0x610/0x610 [ 367.746219] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 367.750815] ? kasan_check_write+0x14/0x20 [ 367.755061] p9_client_attach+0xbc/0x860 [ 367.759132] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 367.764253] ? debug_check_no_obj_freed+0x30b/0x595 [ 367.769281] ? p9_client_walk+0xab0/0xab0 [ 367.773443] ? trace_hardirqs_off+0xd/0x10 [ 367.777682] ? quarantine_put+0x10d/0x1b0 [ 367.781837] ? kfree+0x111/0x260 [ 367.785216] ? v9fs_session_init+0xd5b/0x1a80 [ 367.789729] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 367.794759] v9fs_session_init+0xf62/0x1a80 [ 367.799082] ? v9fs_session_init+0xf62/0x1a80 [ 367.803592] ? v9fs_show_options+0x7e0/0x7e0 [ 367.808008] ? rcu_is_watching+0x8c/0x150 [ 367.812156] ? rcu_pm_notify+0xc0/0xc0 [ 367.816051] ? v9fs_mount+0x61/0x900 [ 367.819768] ? rcu_read_lock_sched_held+0x108/0x120 [ 367.824793] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 367.830332] v9fs_mount+0x7c/0x900 [ 367.833884] mount_fs+0xae/0x328 [ 367.837258] vfs_kern_mount.part.34+0xdc/0x4e0 [ 367.841847] ? may_umount+0xb0/0xb0 [ 367.845479] ? _raw_read_unlock+0x22/0x30 [ 367.849632] ? __get_fs_type+0x97/0xc0 [ 367.853529] do_mount+0x581/0x30e0 [ 367.857078] ? copy_mount_string+0x40/0x40 [ 367.861327] ? copy_mount_options+0x5f/0x380 [ 367.865741] ? rcu_read_lock_sched_held+0x108/0x120 [ 367.870760] ? kmem_cache_alloc_trace+0x616/0x780 [ 367.875619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.881158] ? copy_mount_options+0x285/0x380 [ 367.885662] ksys_mount+0x12d/0x140 [ 367.889291] __x64_sys_mount+0xbe/0x150 [ 367.893261] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 367.898266] do_syscall_64+0x1b9/0x820 [ 367.902140] ? finish_task_switch+0x1d3/0x870 [ 367.906625] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.911540] ? syscall_return_slowpath+0x31d/0x5e0 [ 367.916480] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 367.921829] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.926661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.931834] RIP: 0033:0x455ab9 [ 367.935000] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.954229] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 367.961920] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 00:06:07 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b70200000000001fbfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xac9, 0x480000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0xe4, &(0x7f0000000080)="2e1e6c22c5cf507721c822a54a75", &(0x7f0000000380)=""/228}, 0x28) 00:06:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}) [ 367.969173] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 367.976421] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 367.983945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 367.991195] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001c [ 368.033982] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 00:06:08 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xfbbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xffbffffffffffffe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000280)=""/16) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast}, &(0x7f00000001c0)=0xc) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) clone(0x0, &(0x7f0000000380), &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000200)) 00:06:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f33"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet(0x2, 0xe, 0xffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000140)="d940490f01cf0f20df67660f3880900030c7442400fa3c0000c744240288990000c7442406000000000f01142464f40f01c866b852000f00d80f01df66baf80cb8ff0ec788ef66bafc0cb0c5ee"}], 0x3b3, 0x0, &(0x7f0000000000), 0x70ac483d0fc324d) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:06:08 executing program 3 (fault-call:8 fault-nth:29): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:08 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x20) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23}, 0xffffffffffffffce) socketpair(0x11, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r3, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000004800)=[{{&(0x7f0000003d00)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000003f40), 0x0, &(0x7f0000003f80)}}, {{&(0x7f0000004080)=@sco={0x1f}, 0x80, &(0x7f0000004200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000000000000000e0000000000000001d010000000200003d9a1b985f07e83ba7bea88beaea72035b022f6caad314c03ab02a642e10b31a39ae1d5927862730f71101350b5d29be1f9b7394bc4a6535ece60c1cdbc49b4d9a0f2b2d3ef67037ed067d7994538e577789a5de89a48c6de3f25e5b1243501d0307e1c270e13659ae90366f6395fb12916a06a531402d95d3c05e27d0aa0b2ca72a347acc8bbeb221006147a0cf06000000dfa95a25823914383b6795e89dfe61539879354f2cbadb7a674fb611b3e8a7f7b2b0b5f8955e5e44c5d8ae2898d8121d3e4ef4aa8c2dab00000000000000aa43517be43aeffbe1961d2863a0005d22f5fc65b41bef3af7e6f52db20e170a1aa1ac299f027af6d30622368fa6c17023fa9bd8855452e75e1cea469fbd29a2a2d3a75d3bd2ca8206bea72f550e5619fa2372cb2892b8687fc5689f543d7426eee6dde7860724516266dfb20ceda01fec0a4dc9da5a6ece9a1b626bee9e07e2c6db83ceb031a6ac5673d5c6c2455c6bd95950b17aa4d0c3297dfc712a61b953bcd16468bc32c0"], 0xf0, 0x32de921f73345a5c}, 0x3ff}], 0x2, 0x0) [ 368.230943] FAULT_INJECTION: forcing a failure. [ 368.230943] name failslab, interval 1, probability 0, space 0, times 0 [ 368.242390] CPU: 0 PID: 25195 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 368.249760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.259114] Call Trace: [ 368.260609] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 368.261705] dump_stack+0x1c9/0x2b4 [ 368.261727] ? dump_stack_print_info.cold.2+0x52/0x52 [ 368.261744] ? __lock_acquire+0x7fc/0x5020 [ 368.261768] should_fail.cold.4+0xa/0x1a [ 368.285993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 368.291110] ? graph_lock+0x170/0x170 [ 368.294920] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.300458] ? node_tag_clear+0xc0/0x1c0 [ 368.304533] ? find_held_lock+0x36/0x1c0 [ 368.308597] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 368.313440] ? check_same_owner+0x340/0x340 [ 368.317760] ? rcu_note_context_switch+0x730/0x730 [ 368.322699] __should_failslab+0x124/0x180 [ 368.326938] should_failslab+0x9/0x14 [ 368.330737] kmem_cache_alloc_trace+0x2cb/0x780 [ 368.335402] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 368.340417] ? trace_hardirqs_on+0xd/0x10 [ 368.344574] p9_client_prepare_req.part.8+0x82a/0xcd0 [ 368.349772] ? p9_free_req.isra.7+0x140/0x140 [ 368.354265] ? __radix_tree_replace+0x1fc/0x360 [ 368.358930] ? graph_lock+0x170/0x170 [ 368.362727] ? graph_lock+0x170/0x170 [ 368.366520] ? node_tag_clear+0xc0/0x1c0 [ 368.370583] p9_client_rpc+0x1bd/0x1400 [ 368.374562] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 368.379919] ? find_held_lock+0x36/0x1c0 [ 368.383986] ? lock_downgrade+0x8f0/0x8f0 [ 368.388142] ? kasan_check_read+0x11/0x20 [ 368.392287] ? do_raw_spin_unlock+0xa7/0x2f0 [ 368.396697] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 368.401282] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 368.406385] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 368.411398] ? trace_hardirqs_on+0xd/0x10 [ 368.415552] ? check_memory_region+0x191/0x1b0 [ 368.420135] ? p9_client_destroy+0x610/0x610 [ 368.424549] p9_client_attach+0x19f/0x860 [ 368.428703] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 368.433803] ? debug_check_no_obj_freed+0x30b/0x595 [ 368.438814] ? p9_client_walk+0xab0/0xab0 [ 368.442963] ? trace_hardirqs_off+0xd/0x10 [ 368.447195] ? quarantine_put+0x10d/0x1b0 [ 368.451340] ? kfree+0x111/0x260 [ 368.454703] ? v9fs_session_init+0xd5b/0x1a80 [ 368.459198] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 368.464214] v9fs_session_init+0xf62/0x1a80 [ 368.468536] ? v9fs_session_init+0xf62/0x1a80 [ 368.473041] ? v9fs_show_options+0x7e0/0x7e0 [ 368.477451] ? rcu_is_watching+0x8c/0x150 [ 368.481594] ? rcu_pm_notify+0xc0/0xc0 [ 368.485484] ? v9fs_mount+0x61/0x900 [ 368.489197] ? rcu_read_lock_sched_held+0x108/0x120 [ 368.494220] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 368.499755] v9fs_mount+0x7c/0x900 [ 368.503297] mount_fs+0xae/0x328 [ 368.506671] vfs_kern_mount.part.34+0xdc/0x4e0 [ 368.511253] ? may_umount+0xb0/0xb0 [ 368.514878] ? _raw_read_unlock+0x22/0x30 [ 368.519018] ? __get_fs_type+0x97/0xc0 [ 368.522910] do_mount+0x581/0x30e0 [ 368.526453] ? do_raw_spin_unlock+0xa7/0x2f0 [ 368.530861] ? copy_mount_string+0x40/0x40 [ 368.535096] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.539854] ? retint_kernel+0x10/0x10 [ 368.543746] ? copy_mount_options+0x1f0/0x380 [ 368.548240] ? copy_mount_options+0x202/0x380 [ 368.552740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.558272] ? copy_mount_options+0x285/0x380 [ 368.562772] ksys_mount+0x12d/0x140 [ 368.566401] __x64_sys_mount+0xbe/0x150 [ 368.570372] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 368.575389] do_syscall_64+0x1b9/0x820 [ 368.579269] ? finish_task_switch+0x1d3/0x870 [ 368.583762] ? syscall_return_slowpath+0x5e0/0x5e0 [ 368.588690] ? syscall_return_slowpath+0x31d/0x5e0 [ 368.593622] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 368.598993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 368.603839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.609025] RIP: 0033:0x455ab9 [ 368.612204] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.631562] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.639267] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 368.646528] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 368.653812] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 368.661073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 368.668334] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001d [ 368.675953] 9pnet: Couldn't grow tag array 00:06:08 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xabf1, 0x2802) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000001000)=ANY=[@ANYBLOB="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"]) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000dc0)={"0000e1ffffff0400", {0x2, 0x4e25, @multicast1=0xe0000001}}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000d00)={r1, 0x0, 0x2, 0x3, 0x3ff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000cc0)={0x0, 0x9, 0x0, 0x12, 0x2, 0x3}, &(0x7f0000000d40)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000e00)={r2, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e24, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}]}, &(0x7f0000000e40)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f00000f9000)=[{&(0x7f00000002c0)=""/2560, 0xa00}], 0x1) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000040)) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000280)={0x0, 0x15000, 0xa257, 0x7fffffff, 0x400}) 00:06:08 executing program 4: r0 = socket$inet(0x2, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x3) connect$inet(r0, &(0x7f0000000080)={0x2}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2a0642}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r2, 0x2a, 0x70bd26, 0x25dfdbfb, {0xd}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x1) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000002c0), 0x0, 0x100, &(0x7f0000000340)={r3, r4+10000000}) 00:06:08 executing program 5: mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffe) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffffc) r1 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0xfffffffffffffe85) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/181, &(0x7f0000000180)=0xb5) 00:06:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) 00:06:08 executing program 3 (fault-call:8 fault-nth:30): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'system.posix_acl_default\x00'}, 0x2c}]}}) 00:06:08 executing program 2: r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001580)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000030, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)={0x14, 0x1a, 0x201}, 0x14}, 0x1}, 0x0) 00:06:08 executing program 7: r0 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80087601, &(0x7f0000000000)={0x5, 0x7fffffff, 0x0, 0x2, 0x1}) 00:06:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000002900000008000000000000da"], 0x14}}], 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 00:06:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 00:06:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64], 0x8) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) [ 369.020803] FAULT_INJECTION: forcing a failure. [ 369.020803] name failslab, interval 1, probability 0, space 0, times 0 [ 369.032071] CPU: 1 PID: 25232 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 369.039424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.048773] Call Trace: [ 369.051360] dump_stack+0x1c9/0x2b4 [ 369.054987] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.060175] ? __save_stack_trace+0x8d/0xf0 [ 369.064504] should_fail.cold.4+0xa/0x1a [ 369.068566] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.073670] ? save_stack+0x43/0xd0 [ 369.077291] ? kasan_kmalloc+0xc4/0xe0 [ 369.081173] ? kasan_slab_alloc+0x12/0x20 [ 369.085319] ? kmem_cache_alloc+0x12e/0x760 [ 369.089635] ? fscache_alloc_cookie+0xcb/0x880 [ 369.094211] ? __fscache_acquire_cookie+0x230/0xb00 [ 369.099225] ? v9fs_session_init+0x1013/0x1a80 [ 369.103805] ? v9fs_mount+0x7c/0x900 [ 369.107513] ? mount_fs+0xae/0x328 [ 369.111052] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 369.115802] ? do_mount+0x581/0x30e0 [ 369.119512] ? ksys_mount+0x12d/0x140 [ 369.123307] ? __x64_sys_mount+0xbe/0x150 [ 369.127455] ? do_syscall_64+0x1b9/0x820 [ 369.131523] ? find_held_lock+0x36/0x1c0 [ 369.135599] ? check_same_owner+0x340/0x340 [ 369.139915] ? rcu_is_watching+0x8c/0x150 [ 369.144064] ? rcu_note_context_switch+0x730/0x730 [ 369.148996] __should_failslab+0x124/0x180 [ 369.153231] should_failslab+0x9/0x14 [ 369.157031] __kmalloc+0x2c8/0x760 [ 369.160566] ? kmem_cache_alloc+0x5fa/0x760 [ 369.164891] ? fscache_alloc_cookie+0x701/0x880 [ 369.169559] fscache_alloc_cookie+0x701/0x880 [ 369.174057] ? fscache_cookie_init_once+0x80/0x80 [ 369.178898] ? lock_downgrade+0x8f0/0x8f0 [ 369.183043] ? radix_tree_delete_item+0x188/0x310 [ 369.187888] ? kasan_check_read+0x11/0x20 [ 369.192034] ? do_raw_spin_unlock+0xa7/0x2f0 [ 369.196440] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 369.201022] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 369.206133] __fscache_acquire_cookie+0x230/0xb00 [ 369.210978] ? fscache_cookie_put+0x850/0x850 [ 369.215471] ? p9_client_attach+0x215/0x860 [ 369.219788] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 369.224891] ? debug_check_no_obj_freed+0x30b/0x595 [ 369.229903] ? p9_client_walk+0xab0/0xab0 [ 369.234052] ? trace_hardirqs_off+0xd/0x10 [ 369.238282] ? quarantine_put+0x10d/0x1b0 [ 369.242432] ? kfree+0x111/0x260 [ 369.245802] v9fs_cache_session_get_cookie+0xc4/0x270 [ 369.250991] v9fs_session_init+0x1013/0x1a80 [ 369.255412] ? v9fs_show_options+0x7e0/0x7e0 [ 369.259823] ? rcu_is_watching+0x8c/0x150 [ 369.263967] ? rcu_pm_notify+0xc0/0xc0 [ 369.267857] ? v9fs_mount+0x61/0x900 [ 369.271570] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.276590] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 369.282124] v9fs_mount+0x7c/0x900 [ 369.285669] mount_fs+0xae/0x328 [ 369.289035] vfs_kern_mount.part.34+0xdc/0x4e0 [ 369.293616] ? may_umount+0xb0/0xb0 [ 369.297243] ? _raw_read_unlock+0x22/0x30 [ 369.301399] ? __get_fs_type+0x97/0xc0 [ 369.305287] do_mount+0x581/0x30e0 [ 369.308830] ? copy_mount_string+0x40/0x40 [ 369.313071] ? copy_mount_options+0x5f/0x380 [ 369.317479] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.322491] ? kmem_cache_alloc_trace+0x616/0x780 [ 369.327336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.332872] ? _copy_from_user+0xdf/0x150 [ 369.337021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.342552] ? copy_mount_options+0x285/0x380 [ 369.347050] ksys_mount+0x12d/0x140 [ 369.350681] __x64_sys_mount+0xbe/0x150 [ 369.354652] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.359669] do_syscall_64+0x1b9/0x820 [ 369.363553] ? syscall_return_slowpath+0x5e0/0x5e0 [ 369.368482] ? syscall_return_slowpath+0x31d/0x5e0 [ 369.373415] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.378794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.383638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.388821] RIP: 0033:0x455ab9 [ 369.391996] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.411363] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.419066] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 369.426332] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 369.433591] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 369.440855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 369.448121] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001e [ 369.455595] kasan: CONFIG_KASAN_INLINE enabled [ 369.460175] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 369.467534] general protection fault: 0000 [#1] SMP KASAN [ 369.473071] CPU: 1 PID: 25232 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #147 [ 369.480419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.489774] RIP: 0010:kfree+0xa0/0x260 [ 369.493642] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 369.512892] RSP: 0018:ffff88019508f438 EFLAGS: 00010007 [ 369.518233] RAX: ffffea0000000000 RBX: 3733313035393234 RCX: 0000000000000000 [ 369.525477] RDX: 00dcb8a4c0d4e4c0 RSI: 0000000000000000 RDI: 3733313035393234 [ 369.532721] RBP: ffff88019508f458 R08: ffffed003b5e46d7 R09: ffffed003b5e46d6 [ 369.539965] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: 0000000000000286 [ 369.547215] R13: ffffffff81f49660 R14: dffffc0000000000 R15: 0000000000000000 [ 369.554474] FS: 00007f2da9cf1700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 369.562696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 00:06:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$getname(0x10, &(0x7f0000000200)=""/75) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e080, 0xaaaaaaaaaaaac40, &(0x7f0000000080)=[{&(0x7f0000000280)="eb64c96d6b66732e66617400020441000500077069b7", 0x16, 0x800}], 0x0, &(0x7f0000000240)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 00:06:09 executing program 7: socketpair$unix(0x1, 0x800000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924925b5, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000080)=""/67, 0x43}, {&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/58, 0x3a}], 0x4) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002900)={0x0, 0x0, 0x0}, &(0x7f0000002940)=0x14) recvfrom(r0, &(0x7f0000000200)=""/253, 0xfd, 0x40000000, &(0x7f0000002980)=@hci={0x1f, r2, 0x3}, 0x80) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) 00:06:09 executing program 1: r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x66}, 0x8) r2 = getpgrp(0x0) sched_setattr(r2, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x200, &(0x7f0000000280)="80000200008e91e6446151606f967b65088264139e16326625e2db237cca28439838eac2746b4709", &(0x7f0000744000), &(0x7f0000000200), &(0x7f0000000180)) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f00000004c0)=[{{&(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, &(0x7f0000000400)=""/179, 0xb3, 0x6}, 0x6}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)={0x77359400}) sendto$llc(r3, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) [ 369.568575] CR2: 000000000047a9b0 CR3: 00000001b2e45000 CR4: 00000000001406e0 [ 369.575842] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 369.583107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 369.590367] Call Trace: [ 369.592959] fscache_free_cookie+0x230/0x280 [ 369.597366] ? __fscache_enable_cookie+0x760/0x760 [ 369.602298] ? fscache_alloc_cookie+0x701/0x880 [ 369.606968] fscache_alloc_cookie+0x74c/0x880 [ 369.611464] ? fscache_cookie_init_once+0x80/0x80 [ 369.616298] ? lock_downgrade+0x8f0/0x8f0 [ 369.620430] ? radix_tree_delete_item+0x188/0x310 [ 369.625264] ? kasan_check_read+0x11/0x20 [ 369.629402] ? do_raw_spin_unlock+0xa7/0x2f0 [ 369.633791] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 369.638369] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 369.643476] __fscache_acquire_cookie+0x230/0xb00 [ 369.648312] ? fscache_cookie_put+0x850/0x850 [ 369.652804] ? p9_client_attach+0x215/0x860 [ 369.657126] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 369.662221] ? debug_check_no_obj_freed+0x30b/0x595 [ 369.667226] ? p9_client_walk+0xab0/0xab0 [ 369.671367] ? trace_hardirqs_off+0xd/0x10 [ 369.675594] ? quarantine_put+0x10d/0x1b0 [ 369.679743] ? kfree+0x111/0x260 [ 369.683113] v9fs_cache_session_get_cookie+0xc4/0x270 [ 369.688299] v9fs_session_init+0x1013/0x1a80 [ 369.692702] ? v9fs_show_options+0x7e0/0x7e0 [ 369.697110] ? rcu_is_watching+0x8c/0x150 [ 369.701254] ? rcu_pm_notify+0xc0/0xc0 [ 369.705141] ? v9fs_mount+0x61/0x900 [ 369.708843] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.713850] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 369.719377] v9fs_mount+0x7c/0x900 [ 369.722908] mount_fs+0xae/0x328 [ 369.726261] vfs_kern_mount.part.34+0xdc/0x4e0 [ 369.730827] ? may_umount+0xb0/0xb0 [ 369.734439] ? _raw_read_unlock+0x22/0x30 [ 369.738570] ? __get_fs_type+0x97/0xc0 [ 369.742445] do_mount+0x581/0x30e0 [ 369.745973] ? copy_mount_string+0x40/0x40 [ 369.750201] ? copy_mount_options+0x5f/0x380 [ 369.754594] ? rcu_read_lock_sched_held+0x108/0x120 [ 369.759595] ? kmem_cache_alloc_trace+0x616/0x780 [ 369.764425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.769949] ? _copy_from_user+0xdf/0x150 [ 369.774084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.779604] ? copy_mount_options+0x285/0x380 [ 369.784084] ksys_mount+0x12d/0x140 [ 369.787696] __x64_sys_mount+0xbe/0x150 [ 369.791654] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.796656] do_syscall_64+0x1b9/0x820 [ 369.800546] ? syscall_return_slowpath+0x5e0/0x5e0 [ 369.805464] ? syscall_return_slowpath+0x31d/0x5e0 [ 369.810380] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 369.815729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 369.820560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.825742] RIP: 0033:0x455ab9 [ 369.828910] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.848177] RSP: 002b:00007f2da9cf0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 369.855869] RAX: ffffffffffffffda RBX: 00007f2da9cf16d4 RCX: 0000000000455ab9 [ 369.863130] RDX: 00000000200002c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 369.870382] RBP: 000000000072bea0 R08: 0000000020000700 R09: 0000000000000000 [ 369.877635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 369.884885] R13: 00000000004c0201 R14: 00000000004cfe50 R15: 000000000000001e [ 369.892143] Modules linked in: [ 369.895321] Dumping ftrace buffer: [ 369.898852] (ftrace buffer empty) [ 369.902555] ---[ end trace a462b5f0fee3843d ]--- [ 369.907298] RIP: 0010:kfree+0xa0/0x260 [ 369.911161] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 369.930423] RSP: 0018:ffff88019508f438 EFLAGS: 00010007 [ 369.935769] RAX: ffffea0000000000 RBX: 3733313035393234 RCX: 0000000000000000 [ 369.943022] RDX: 00dcb8a4c0d4e4c0 RSI: 0000000000000000 RDI: 3733313035393234 [ 369.950274] RBP: ffff88019508f458 R08: ffffed003b5e46d7 R09: ffffed003b5e46d6 [ 369.957525] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: 0000000000000286 [ 369.964778] R13: ffffffff81f49660 R14: dffffc0000000000 R15: 0000000000000000 [ 369.972036] FS: 00007f2da9cf1700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 369.980241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.986103] CR2: 000000000047a9b0 CR3: 00000001b2e45000 CR4: 00000000001406e0 [ 369.993354] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.000605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.007856] Kernel panic - not syncing: Fatal exception [ 370.013649] Dumping ftrace buffer: [ 370.017170] (ftrace buffer empty) [ 370.020857] Kernel Offset: disabled [ 370.024466] Rebooting in 86400 seconds..