g2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:10 executing program 2: r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) [ 216.273440][T14823] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. 23:00:10 executing program 4: syz_btf_id_by_name$bpf_lsm(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') close(r1) 23:00:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:10 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000040)) 23:00:10 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:10 executing program 2: r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 23:00:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x8) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x0, 0x81) fsetxattr(r1, &(0x7f0000000040)=@random={'osx.', '/dev/snapshot\x00'}, 0x0, 0x0, 0x0) 23:00:11 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000040)) 23:00:11 executing program 4: syz_btf_id_by_name$bpf_lsm(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') close(r1) 23:00:11 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:11 executing program 2: r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 23:00:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:11 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x3}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, &(0x7f0000000040)) 23:00:11 executing program 3: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:11 executing program 2: r0 = getpgid(0x0) r1 = pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 23:00:11 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:11 executing program 4: syz_btf_id_by_name$bpf_lsm(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd/3\x00') close(r1) 23:00:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x8) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x0, 0x81) fsetxattr(r1, &(0x7f0000000040)=@random={'osx.', '/dev/snapshot\x00'}, 0x0, 0x0, 0x0) 23:00:11 executing program 2: getitimer(0x0, &(0x7f0000000000)) 23:00:11 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0x1, 0xfc48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:00:11 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70}) 23:00:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x2, &(0x7f0000000000), 0x20a154cc) 23:00:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70}) 23:00:11 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\xbd#\x00\xe6Z\x00\xaf\x00\x01\x00\x00\x00\x00\x00\x00y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\x7f\x17c\x13\x8d\x7fOo\xe19\x96\xa8\x93\xb3=\xa1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19TH[\x02\xddf\xa8\xc58ig2\x15\x17lL\xcc>\xf4O\xe2\x9f\xd9\xae\xcf>/\x00j', 0x4) fallocate(r0, 0x0, 0x0, 0x400001) fallocate(r0, 0x3, 0x2, 0xffffffff) 23:00:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9b5ed22be52330ee, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xffffffff) read(r0, &(0x7f0000001c40)=""/242, 0xf2) 23:00:11 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0x1, 0xfc48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:00:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x2, &(0x7f0000000000), 0x20a154cc) 23:00:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x8) sendfile(r0, r1, &(0x7f00000001c0), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fallocate(r1, 0x3, 0x0, 0x81) fsetxattr(r1, &(0x7f0000000040)=@random={'osx.', '/dev/snapshot\x00'}, 0x0, 0x0, 0x0) 23:00:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70}) 23:00:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x2, &(0x7f0000000000), 0x20a154cc) 23:00:11 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0x1, 0xfc48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:00:11 executing program 5: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 1: clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x16) 23:00:11 executing program 1: clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x16) 23:00:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x1, 0x70}) 23:00:11 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x2, &(0x7f0000000000), 0x20a154cc) 23:00:11 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000140)=0x1, 0xfc48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:00:11 executing program 5: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 1: clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x16) 23:00:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fb1f14701ffffffffffffff66538d750f6ee1d001093f13", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:11 executing program 2: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 1: clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x16) 23:00:11 executing program 4: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x4a, 0x0, 0x0) 23:00:11 executing program 5: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, "926ba622318e33384bbb4c6aad9e173b72e77d7120dd696c5c4140bc24e21a90e241c021df68a717e5d8e823a08549363a6547261d3211c302fd4aea261f1ca1", "133e072812fd6078efeb3ee2331774e5caf2a4afda9ec3beac3d3064348812cc2e702776b67286187a16e2975390163b7aa95a75a377317a59020ed40fea0e67", "7e3e23d4dd0c2158bcf1ff8e2f054f45f7505458608c57333580f91f7baff063"}) 23:00:11 executing program 4: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x4a, 0x0, 0x0) 23:00:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:11 executing program 2: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fb1f14701ffffffffffffff66538d750f6ee1d001093f13", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:00:11 executing program 5: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 4: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x4a, 0x0, 0x0) 23:00:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:11 executing program 2: clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x2, &(0x7f00000004c0)={{}, {0x0, r0/1000+10000}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{}, {0x0, r1/1000+60000}}, 0x0) 23:00:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:00:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fb1f14701ffffffffffffff66538d750f6ee1d001093f13", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:11 executing program 4: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x4a, 0x0, 0x0) 23:00:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fb1f14701ffffffffffffff66538d750f6ee1d001093f13", 0x22}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x34) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:00:11 executing program 4: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 23:00:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:12 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000240)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f0000000180)='./file2\x00', 0x0) 23:00:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:12 executing program 4: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 23:00:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000740)) 23:00:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:00:12 executing program 4: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 23:00:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 217.534962][T15079] loop3: detected capacity change from 0 to 270 23:00:12 executing program 1: unshare(0x4000400) r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, &(0x7f00000044c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40186366, &(0x7f0000004600)) 23:00:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 23:00:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 4: pipe2(&(0x7f0000000bc0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0xb, 0x0) 23:00:12 executing program 1: unshare(0x4000400) r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, &(0x7f00000044c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40186366, &(0x7f0000004600)) 23:00:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) setuid(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) 23:00:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 23:00:12 executing program 1: unshare(0x4000400) r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, &(0x7f00000044c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40186366, &(0x7f0000004600)) 23:00:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 23:00:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 1: unshare(0x4000400) r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, &(0x7f00000044c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000001080)=0x80) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x40186366, &(0x7f0000004600)) 23:00:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}, 0x1}, 0x90) 23:00:12 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800005, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 23:00:12 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sg(&(0x7f0000001540), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 23:00:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}, 0x1}, 0x90) 23:00:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r3, r4/1000+10000}}) futex(&(0x7f0000000180)=0x2, 0x3, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)=0x1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept$unix(r1, 0x0, 0x0) 23:00:12 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/248, 0xf8}], 0x3, 0x0, 0x0) 23:00:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}, 0x1}, 0x90) [ 217.963435][T15168] loop5: detected capacity change from 0 to 1 [ 218.046991][T15168] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 218.048151][T15168] loop5: p1 start 10 is beyond EOD, truncated [ 218.141216][T15168] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 218.176389][T15168] loop5: p3 start 225 is beyond EOD, truncated [ 218.182593][T15168] loop5: p4 size 2 extends beyond EOD, truncated [ 218.199609][T15168] loop5: p5 start 10 is beyond EOD, truncated [ 218.205743][T15168] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 218.214352][T15168] loop5: p7 start 225 is beyond EOD, truncated [ 218.220542][T15168] loop5: p8 start 10 is beyond EOD, truncated [ 218.226810][T15168] loop5: p9 size 1073872896 extends beyond EOD, truncated [ 218.234568][T15168] loop5: p10 start 225 is beyond EOD, truncated [ 218.240943][T15168] loop5: p11 start 10 is beyond EOD, truncated [ 218.247190][T15168] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 218.254960][T15168] loop5: p13 start 225 is beyond EOD, truncated [ 218.261356][T15168] loop5: p14 start 10 is beyond EOD, truncated [ 218.267533][T15168] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 218.275271][T15168] loop5: p16 start 225 is beyond EOD, truncated [ 218.281527][T15168] loop5: p17 start 10 is beyond EOD, truncated [ 218.287736][T15168] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 218.295426][T15168] loop5: p19 start 225 is beyond EOD, truncated [ 218.301789][T15168] loop5: p20 start 10 is beyond EOD, truncated [ 218.307958][T15168] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 218.315601][T15168] loop5: p22 start 225 is beyond EOD, truncated [ 218.321854][T15168] loop5: p23 start 10 is beyond EOD, truncated [ 218.328127][T15168] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 218.335780][T15168] loop5: p25 start 225 is beyond EOD, truncated [ 218.342126][T15168] loop5: p26 start 10 is beyond EOD, truncated [ 218.348289][T15168] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 218.355942][T15168] loop5: p28 start 225 is beyond EOD, truncated [ 218.362205][T15168] loop5: p29 start 10 is beyond EOD, truncated [ 218.368384][T15168] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 218.375897][T15168] loop5: p31 start 225 is beyond EOD, truncated [ 218.382210][T15168] loop5: p32 start 10 is beyond EOD, truncated [ 218.388415][T15168] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 218.396044][T15168] loop5: p34 start 225 is beyond EOD, truncated [ 218.402323][T15168] loop5: p35 start 10 is beyond EOD, truncated [ 218.408503][T15168] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 218.416312][T15168] loop5: p37 start 225 is beyond EOD, truncated [ 218.422554][T15168] loop5: p38 start 10 is beyond EOD, truncated [ 218.428794][T15168] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 218.436316][T15168] loop5: p40 start 225 is beyond EOD, truncated [ 218.442561][T15168] loop5: p41 start 10 is beyond EOD, truncated [ 218.448743][T15168] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 218.456277][T15168] loop5: p43 start 225 is beyond EOD, truncated [ 218.462577][T15168] loop5: p44 start 10 is beyond EOD, truncated [ 218.468807][T15168] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 218.476567][T15168] loop5: p46 start 225 is beyond EOD, truncated [ 218.482807][T15168] loop5: p47 start 10 is beyond EOD, truncated [ 218.488993][T15168] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 218.496607][T15168] loop5: p49 start 225 is beyond EOD, truncated [ 218.502854][T15168] loop5: p50 start 10 is beyond EOD, truncated [ 218.509023][T15168] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 218.516772][T15168] loop5: p52 start 225 is beyond EOD, truncated [ 218.523064][T15168] loop5: p53 start 10 is beyond EOD, truncated [ 218.529205][T15168] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 218.536829][T15168] loop5: p55 start 225 is beyond EOD, truncated [ 218.543248][T15168] loop5: p56 start 10 is beyond EOD, truncated [ 218.549431][T15168] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 218.557389][T15168] loop5: p58 start 225 is beyond EOD, truncated [ 218.563679][T15168] loop5: p59 start 10 is beyond EOD, truncated [ 218.569820][T15168] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 218.577434][T15168] loop5: p61 start 225 is beyond EOD, truncated [ 218.583720][T15168] loop5: p62 start 10 is beyond EOD, truncated [ 218.589885][T15168] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 218.597677][T15168] loop5: p64 start 225 is beyond EOD, truncated [ 218.603964][T15168] loop5: p65 start 10 is beyond EOD, truncated [ 218.610110][T15168] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 218.617920][T15168] loop5: p67 start 225 is beyond EOD, truncated [ 218.624201][T15168] loop5: p68 start 10 is beyond EOD, truncated [ 218.630375][T15168] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 218.638076][T15168] loop5: p70 start 225 is beyond EOD, truncated [ 218.644354][T15168] loop5: p71 start 10 is beyond EOD, truncated [ 218.650651][T15168] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 218.658512][T15168] loop5: p73 start 225 is beyond EOD, truncated [ 218.664789][T15168] loop5: p74 start 10 is beyond EOD, truncated [ 218.670937][T15168] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 218.678607][T15168] loop5: p76 start 225 is beyond EOD, truncated [ 218.684883][T15168] loop5: p77 start 10 is beyond EOD, truncated [ 218.691143][T15168] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 218.699071][T15168] loop5: p79 start 225 is beyond EOD, truncated [ 218.705349][T15168] loop5: p80 start 10 is beyond EOD, truncated [ 218.711569][T15168] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 218.719388][T15168] loop5: p82 start 225 is beyond EOD, truncated [ 218.725667][T15168] loop5: p83 start 10 is beyond EOD, truncated [ 218.731871][T15168] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 218.739546][T15168] loop5: p85 start 225 is beyond EOD, truncated [ 218.745830][T15168] loop5: p86 start 10 is beyond EOD, truncated [ 218.751975][T15168] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 218.759768][T15168] loop5: p88 start 225 is beyond EOD, truncated [ 218.766227][T15168] loop5: p89 start 10 is beyond EOD, truncated [ 218.772372][T15168] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 218.780349][T15168] loop5: p91 start 225 is beyond EOD, truncated [ 218.786626][T15168] loop5: p92 start 10 is beyond EOD, truncated [ 218.792823][T15168] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 218.800509][T15168] loop5: p94 start 225 is beyond EOD, truncated [ 218.806789][T15168] loop5: p95 start 10 is beyond EOD, truncated [ 218.812929][T15168] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 218.820645][T15168] loop5: p97 start 225 is beyond EOD, truncated [ 218.826926][T15168] loop5: p98 start 10 is beyond EOD, truncated [ 218.833162][T15168] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 218.840819][T15168] loop5: p100 start 225 is beyond EOD, truncated [ 218.847180][T15168] loop5: p101 start 10 is beyond EOD, truncated [ 218.853478][T15168] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 218.861114][T15168] loop5: p103 start 225 is beyond EOD, truncated [ 218.867506][T15168] loop5: p104 start 10 is beyond EOD, truncated [ 218.873770][T15168] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 218.881509][T15168] loop5: p106 start 225 is beyond EOD, truncated [ 218.887861][T15168] loop5: p107 start 10 is beyond EOD, truncated [ 218.894114][T15168] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 218.901938][T15168] loop5: p109 start 225 is beyond EOD, truncated [ 218.908429][T15168] loop5: p110 start 10 is beyond EOD, truncated [ 218.914683][T15168] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 218.922316][T15168] loop5: p112 start 225 is beyond EOD, truncated [ 218.928709][T15168] loop5: p113 start 10 is beyond EOD, truncated [ 218.935034][T15168] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 218.942641][T15168] loop5: p115 start 225 is beyond EOD, truncated [ 218.949033][T15168] loop5: p116 start 10 is beyond EOD, truncated [ 218.955299][T15168] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 218.962881][T15168] loop5: p118 start 225 is beyond EOD, truncated [ 218.969270][T15168] loop5: p119 start 10 is beyond EOD, truncated [ 218.975677][T15168] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 218.983491][T15168] loop5: p121 start 225 is beyond EOD, truncated [ 218.989815][T15168] loop5: p122 start 10 is beyond EOD, truncated [ 218.996091][T15168] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 219.003868][T15168] loop5: p124 start 225 is beyond EOD, truncated [ 219.010288][T15168] loop5: p125 start 10 is beyond EOD, truncated [ 219.016540][T15168] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 219.024120][T15168] loop5: p127 start 225 is beyond EOD, truncated [ 219.030682][T15168] loop5: p128 start 10 is beyond EOD, truncated [ 219.037024][T15168] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 219.044827][T15168] loop5: p130 start 225 is beyond EOD, truncated [ 219.051186][T15168] loop5: p131 start 10 is beyond EOD, truncated [ 219.057435][T15168] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 219.065217][T15168] loop5: p133 start 225 is beyond EOD, truncated [ 219.071549][T15168] loop5: p134 start 10 is beyond EOD, truncated [ 219.077880][T15168] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 219.085745][T15168] loop5: p136 start 225 is beyond EOD, truncated [ 219.092254][T15168] loop5: p137 start 10 is beyond EOD, truncated [ 219.098531][T15168] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 219.106245][T15168] loop5: p139 start 225 is beyond EOD, truncated [ 219.112568][T15168] loop5: p140 start 10 is beyond EOD, truncated [ 219.118856][T15168] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 219.126493][T15168] loop5: p142 start 225 is beyond EOD, truncated [ 219.132832][T15168] loop5: p143 start 10 is beyond EOD, truncated [ 219.139102][T15168] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 219.146999][T15168] loop5: p145 start 225 is beyond EOD, truncated [ 219.153339][T15168] loop5: p146 start 10 is beyond EOD, truncated [ 219.159580][T15168] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 219.167344][T15168] loop5: p148 start 225 is beyond EOD, truncated [ 219.173700][T15168] loop5: p149 start 10 is beyond EOD, truncated [ 219.179929][T15168] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 219.187531][T15168] loop5: p151 start 225 is beyond EOD, truncated [ 219.193933][T15168] loop5: p152 start 10 is beyond EOD, truncated [ 219.200189][T15168] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 219.207994][T15168] loop5: p154 start 225 is beyond EOD, truncated [ 219.214341][T15168] loop5: p155 start 10 is beyond EOD, truncated [ 219.220638][T15168] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 219.228329][T15168] loop5: p157 start 225 is beyond EOD, truncated [ 219.234755][T15168] loop5: p158 start 10 is beyond EOD, truncated [ 219.240993][T15168] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 219.248649][T15168] loop5: p160 start 225 is beyond EOD, truncated [ 219.255112][T15168] loop5: p161 start 10 is beyond EOD, truncated [ 219.261337][T15168] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 219.268959][T15168] loop5: p163 start 225 is beyond EOD, truncated [ 219.275317][T15168] loop5: p164 start 10 is beyond EOD, truncated [ 219.281551][T15168] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 219.289208][T15168] loop5: p166 start 225 is beyond EOD, truncated [ 219.295559][T15168] loop5: p167 start 10 is beyond EOD, truncated [ 219.301788][T15168] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 219.309409][T15168] loop5: p169 start 225 is beyond EOD, truncated [ 219.315808][T15168] loop5: p170 start 10 is beyond EOD, truncated [ 219.322062][T15168] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 219.329718][T15168] loop5: p172 start 225 is beyond EOD, truncated [ 219.336148][T15168] loop5: p173 start 10 is beyond EOD, truncated [ 219.342442][T15168] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 219.350150][T15168] loop5: p175 start 225 is beyond EOD, truncated [ 219.356643][T15168] loop5: p176 start 10 is beyond EOD, truncated [ 219.362914][T15168] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 219.370556][T15168] loop5: p178 start 225 is beyond EOD, truncated [ 219.376950][T15168] loop5: p179 start 10 is beyond EOD, truncated [ 219.383235][T15168] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 219.390881][T15168] loop5: p181 start 225 is beyond EOD, truncated [ 219.397279][T15168] loop5: p182 start 10 is beyond EOD, truncated [ 219.403549][T15168] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 219.411313][T15168] loop5: p184 start 225 is beyond EOD, truncated [ 219.417665][T15168] loop5: p185 start 10 is beyond EOD, truncated [ 219.423966][T15168] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 219.431967][T15168] loop5: p187 start 225 is beyond EOD, truncated [ 219.438322][T15168] loop5: p188 start 10 is beyond EOD, truncated [ 219.444666][T15168] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 219.452486][T15168] loop5: p190 start 225 is beyond EOD, truncated [ 219.458946][T15168] loop5: p191 start 10 is beyond EOD, truncated [ 219.465294][T15168] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 219.473078][T15168] loop5: p193 start 225 is beyond EOD, truncated [ 219.479413][T15168] loop5: p194 start 10 is beyond EOD, truncated [ 219.485673][T15168] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 219.493356][T15168] loop5: p196 start 225 is beyond EOD, truncated [ 219.499776][T15168] loop5: p197 start 10 is beyond EOD, truncated [ 219.506024][T15168] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 219.513772][T15168] loop5: p199 start 225 is beyond EOD, truncated [ 219.520192][T15168] loop5: p200 start 10 is beyond EOD, truncated [ 219.526451][T15168] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 219.534312][T15168] loop5: p202 start 225 is beyond EOD, truncated [ 219.540647][T15168] loop5: p203 start 10 is beyond EOD, truncated [ 219.546914][T15168] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 219.554554][T15168] loop5: p205 start 225 is beyond EOD, truncated [ 219.560875][T15168] loop5: p206 start 10 is beyond EOD, truncated [ 219.567318][T15168] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 219.575101][T15168] loop5: p208 start 225 is beyond EOD, truncated [ 219.581449][T15168] loop5: p209 start 10 is beyond EOD, truncated [ 219.587803][T15168] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 219.595552][T15168] loop5: p211 start 225 is beyond EOD, truncated [ 219.601969][T15168] loop5: p212 start 10 is beyond EOD, truncated [ 219.608227][T15168] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 219.615862][T15168] loop5: p214 start 225 is beyond EOD, truncated [ 219.622193][T15168] loop5: p215 start 10 is beyond EOD, truncated [ 219.628443][T15168] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 219.636108][T15168] loop5: p217 start 225 is beyond EOD, truncated [ 219.642431][T15168] loop5: p218 start 10 is beyond EOD, truncated [ 219.648694][T15168] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 219.656682][T15168] loop5: p220 start 225 is beyond EOD, truncated [ 219.663164][T15168] loop5: p221 start 10 is beyond EOD, truncated [ 219.669474][T15168] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 219.677268][T15168] loop5: p223 start 225 is beyond EOD, truncated [ 219.683689][T15168] loop5: p224 start 10 is beyond EOD, truncated [ 219.689952][T15168] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 219.697875][T15168] loop5: p226 start 225 is beyond EOD, truncated [ 219.704223][T15168] loop5: p227 start 10 is beyond EOD, truncated [ 219.710453][T15168] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 219.718258][T15168] loop5: p229 start 225 is beyond EOD, truncated [ 219.724615][T15168] loop5: p230 start 10 is beyond EOD, truncated [ 219.730843][T15168] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 219.738673][T15168] loop5: p232 start 225 is beyond EOD, truncated [ 219.745058][T15168] loop5: p233 start 10 is beyond EOD, truncated [ 219.751282][T15168] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 219.758931][T15168] loop5: p235 start 225 is beyond EOD, truncated [ 219.765291][T15168] loop5: p236 start 10 is beyond EOD, truncated [ 219.771540][T15168] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 219.779399][T15168] loop5: p238 start 225 is beyond EOD, truncated [ 219.785773][T15168] loop5: p239 start 10 is beyond EOD, truncated [ 219.792133][T15168] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 219.800141][T15168] loop5: p241 start 225 is beyond EOD, truncated [ 219.806534][T15168] loop5: p242 start 10 is beyond EOD, truncated [ 219.812765][T15168] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 219.820688][T15168] loop5: p244 start 225 is beyond EOD, truncated [ 219.827050][T15168] loop5: p245 start 10 is beyond EOD, truncated [ 219.833365][T15168] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 219.840922][T15168] loop5: p247 start 225 is beyond EOD, truncated [ 219.847294][T15168] loop5: p248 start 10 is beyond EOD, truncated [ 219.853546][T15168] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 219.861372][T15168] loop5: p250 start 225 is beyond EOD, truncated [ 219.867752][T15168] loop5: p251 start 10 is beyond EOD, truncated [ 219.874069][T15168] loop5: p252 size 1073872896 extends beyond EOD, truncated 23:00:14 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}}, 0x1}, 0x90) 23:00:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:14 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sg(&(0x7f0000001540), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 23:00:14 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 219.881779][T15168] loop5: p253 start 225 is beyond EOD, truncated [ 219.888139][T15168] loop5: p254 start 10 is beyond EOD, truncated [ 219.894407][T15168] loop5: p255 size 1073872896 extends beyond EOD, truncated 23:00:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:14 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sg(&(0x7f0000001540), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 23:00:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:14 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 220.035499][T15315] loop5: detected capacity change from 0 to 1 [ 220.137327][T15315] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 220.137525][T15315] loop5: p1 start 10 is beyond EOD, truncated [ 220.230463][T15315] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 220.249689][T15315] loop5: p3 start 225 is beyond EOD, truncated [ 220.255926][T15315] loop5: p4 size 2 extends beyond EOD, truncated [ 220.263288][T15315] loop5: p5 start 10 is beyond EOD, truncated [ 220.269374][T15315] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 220.277256][T15315] loop5: p7 start 225 is beyond EOD, truncated [ 220.283455][T15315] loop5: p8 start 10 is beyond EOD, truncated [ 220.289532][T15315] loop5: p9 size 1073872896 extends beyond EOD, truncated [ 220.297232][T15315] loop5: p10 start 225 is beyond EOD, truncated [ 220.303600][T15315] loop5: p11 start 10 is beyond EOD, truncated [ 220.309744][T15315] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 220.317629][T15315] loop5: p13 start 225 is beyond EOD, truncated [ 220.323887][T15315] loop5: p14 start 10 is beyond EOD, truncated [ 220.330029][T15315] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 220.337876][T15315] loop5: p16 start 225 is beyond EOD, truncated [ 220.344335][T15315] loop5: p17 start 10 is beyond EOD, truncated [ 220.350475][T15315] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 220.358392][T15315] loop5: p19 start 225 is beyond EOD, truncated [ 220.364763][T15315] loop5: p20 start 10 is beyond EOD, truncated [ 220.370971][T15315] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 220.378761][T15315] loop5: p22 start 225 is beyond EOD, truncated [ 220.385031][T15315] loop5: p23 start 10 is beyond EOD, truncated [ 220.391319][T15315] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 220.398978][T15315] loop5: p25 start 225 is beyond EOD, truncated [ 220.405297][T15315] loop5: p26 start 10 is beyond EOD, truncated [ 220.411466][T15315] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 220.419169][T15315] loop5: p28 start 225 is beyond EOD, truncated [ 220.425510][T15315] loop5: p29 start 10 is beyond EOD, truncated [ 220.431937][T15315] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 220.439738][T15315] loop5: p31 start 225 is beyond EOD, truncated [ 220.446020][T15315] loop5: p32 start 10 is beyond EOD, truncated [ 220.452161][T15315] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 220.459893][T15315] loop5: p34 start 225 is beyond EOD, truncated [ 220.466246][T15315] loop5: p35 start 10 is beyond EOD, truncated [ 220.472396][T15315] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 220.480129][T15315] loop5: p37 start 225 is beyond EOD, truncated [ 220.486510][T15315] loop5: p38 start 10 is beyond EOD, truncated [ 220.492705][T15315] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 220.500642][T15315] loop5: p40 start 225 is beyond EOD, truncated [ 220.506939][T15315] loop5: p41 start 10 is beyond EOD, truncated [ 220.513157][T15315] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 220.520847][T15315] loop5: p43 start 225 is beyond EOD, truncated [ 220.527202][T15315] loop5: p44 start 10 is beyond EOD, truncated [ 220.533368][T15315] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 220.540826][T15315] loop5: p46 start 225 is beyond EOD, truncated [ 220.547097][T15315] loop5: p47 start 10 is beyond EOD, truncated [ 220.553273][T15315] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 220.560815][T15315] loop5: p49 start 225 is beyond EOD, truncated [ 220.567098][T15315] loop5: p50 start 10 is beyond EOD, truncated [ 220.573340][T15315] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 220.580816][T15315] loop5: p52 start 225 is beyond EOD, truncated [ 220.587092][T15315] loop5: p53 start 10 is beyond EOD, truncated [ 220.593316][T15315] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 220.600924][T15315] loop5: p55 start 225 is beyond EOD, truncated [ 220.607210][T15315] loop5: p56 start 10 is beyond EOD, truncated [ 220.613387][T15315] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 220.620951][T15315] loop5: p58 start 225 is beyond EOD, truncated [ 220.627241][T15315] loop5: p59 start 10 is beyond EOD, truncated [ 220.633545][T15315] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 220.641184][T15315] loop5: p61 start 225 is beyond EOD, truncated [ 220.647586][T15315] loop5: p62 start 10 is beyond EOD, truncated [ 220.653756][T15315] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 220.661305][T15315] loop5: p64 start 225 is beyond EOD, truncated [ 220.667631][T15315] loop5: p65 start 10 is beyond EOD, truncated [ 220.673805][T15315] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 220.681331][T15315] loop5: p67 start 225 is beyond EOD, truncated [ 220.687590][T15315] loop5: p68 start 10 is beyond EOD, truncated [ 220.693794][T15315] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 220.701547][T15315] loop5: p70 start 225 is beyond EOD, truncated [ 220.707870][T15315] loop5: p71 start 10 is beyond EOD, truncated [ 220.714035][T15315] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 220.721590][T15315] loop5: p73 start 225 is beyond EOD, truncated [ 220.727852][T15315] loop5: p74 start 10 is beyond EOD, truncated [ 220.734023][T15315] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 220.741760][T15315] loop5: p76 start 225 is beyond EOD, truncated [ 220.748209][T15315] loop5: p77 start 10 is beyond EOD, truncated [ 220.754379][T15315] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 220.761862][T15315] loop5: p79 start 225 is beyond EOD, truncated [ 220.768122][T15315] loop5: p80 start 10 is beyond EOD, truncated [ 220.774309][T15315] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 220.782006][T15315] loop5: p82 start 225 is beyond EOD, truncated [ 220.788307][T15315] loop5: p83 start 10 is beyond EOD, truncated [ 220.794644][T15315] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 220.802224][T15315] loop5: p85 start 225 is beyond EOD, truncated [ 220.808586][T15315] loop5: p86 start 10 is beyond EOD, truncated [ 220.814847][T15315] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 220.822650][T15315] loop5: p88 start 225 is beyond EOD, truncated [ 220.828968][T15315] loop5: p89 start 10 is beyond EOD, truncated [ 220.835255][T15315] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 220.842963][T15315] loop5: p91 start 225 is beyond EOD, truncated [ 220.849297][T15315] loop5: p92 start 10 is beyond EOD, truncated [ 220.855557][T15315] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 220.863120][T15315] loop5: p94 start 225 is beyond EOD, truncated [ 220.869421][T15315] loop5: p95 start 10 is beyond EOD, truncated [ 220.875626][T15315] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 220.883300][T15315] loop5: p97 start 225 is beyond EOD, truncated [ 220.889539][T15315] loop5: p98 start 10 is beyond EOD, truncated [ 220.895835][T15315] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 220.903555][T15315] loop5: p100 start 225 is beyond EOD, truncated [ 220.909877][T15315] loop5: p101 start 10 is beyond EOD, truncated [ 220.916133][T15315] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 220.923823][T15315] loop5: p103 start 225 is beyond EOD, truncated [ 220.930361][T15315] loop5: p104 start 10 is beyond EOD, truncated [ 220.936644][T15315] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 220.944399][T15315] loop5: p106 start 225 is beyond EOD, truncated [ 220.950857][T15315] loop5: p107 start 10 is beyond EOD, truncated [ 220.957108][T15315] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 220.964729][T15315] loop5: p109 start 225 is beyond EOD, truncated [ 220.971159][T15315] loop5: p110 start 10 is beyond EOD, truncated [ 220.977412][T15315] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 220.985207][T15315] loop5: p112 start 225 is beyond EOD, truncated [ 220.991534][T15315] loop5: p113 start 10 is beyond EOD, truncated [ 220.997858][T15315] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 221.005543][T15315] loop5: p115 start 225 is beyond EOD, truncated [ 221.011953][T15315] loop5: p116 start 10 is beyond EOD, truncated [ 221.018224][T15315] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 221.025882][T15315] loop5: p118 start 225 is beyond EOD, truncated [ 221.032209][T15315] loop5: p119 start 10 is beyond EOD, truncated [ 221.038469][T15315] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 221.046074][T15315] loop5: p121 start 225 is beyond EOD, truncated [ 221.052463][T15315] loop5: p122 start 10 is beyond EOD, truncated [ 221.058728][T15315] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 221.066465][T15315] loop5: p124 start 225 is beyond EOD, truncated [ 221.072825][T15315] loop5: p125 start 10 is beyond EOD, truncated [ 221.079066][T15315] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 221.086962][T15315] loop5: p127 start 225 is beyond EOD, truncated [ 221.093314][T15315] loop5: p128 start 10 is beyond EOD, truncated [ 221.100375][T15315] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 221.108053][T15315] loop5: p130 start 225 is beyond EOD, truncated [ 221.114404][T15315] loop5: p131 start 10 is beyond EOD, truncated [ 221.120635][T15315] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 221.128441][T15315] loop5: p133 start 225 is beyond EOD, truncated [ 221.134858][T15315] loop5: p134 start 10 is beyond EOD, truncated [ 221.141147][T15315] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 221.148974][T15315] loop5: p136 start 225 is beyond EOD, truncated [ 221.155328][T15315] loop5: p137 start 10 is beyond EOD, truncated [ 221.161560][T15315] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 221.169356][T15315] loop5: p139 start 225 is beyond EOD, truncated [ 221.175726][T15315] loop5: p140 start 10 is beyond EOD, truncated [ 221.181972][T15315] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 221.189718][T15315] loop5: p142 start 225 is beyond EOD, truncated [ 221.196151][T15315] loop5: p143 start 10 is beyond EOD, truncated [ 221.202379][T15315] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 221.210218][T15315] loop5: p145 start 225 is beyond EOD, truncated [ 221.216573][T15315] loop5: p146 start 10 is beyond EOD, truncated [ 221.222894][T15315] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 221.230579][T15315] loop5: p148 start 225 is beyond EOD, truncated [ 221.236938][T15315] loop5: p149 start 10 is beyond EOD, truncated [ 221.243197][T15315] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 221.250831][T15315] loop5: p151 start 225 is beyond EOD, truncated [ 221.257199][T15315] loop5: p152 start 10 is beyond EOD, truncated [ 221.263440][T15315] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 221.271212][T15315] loop5: p154 start 225 is beyond EOD, truncated [ 221.277598][T15315] loop5: p155 start 10 is beyond EOD, truncated [ 221.283848][T15315] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 221.291402][T15315] loop5: p157 start 225 is beyond EOD, truncated [ 221.297747][T15315] loop5: p158 start 10 is beyond EOD, truncated [ 221.304049][T15315] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 221.311695][T15315] loop5: p160 start 225 is beyond EOD, truncated [ 221.318108][T15315] loop5: p161 start 10 is beyond EOD, truncated [ 221.324365][T15315] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 221.331968][T15315] loop5: p163 start 225 is beyond EOD, truncated [ 221.338315][T15315] loop5: p164 start 10 is beyond EOD, truncated [ 221.344597][T15315] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 221.352336][T15315] loop5: p166 start 225 is beyond EOD, truncated [ 221.358687][T15315] loop5: p167 start 10 is beyond EOD, truncated [ 221.364958][T15315] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 221.372693][T15315] loop5: p169 start 225 is beyond EOD, truncated [ 221.379021][T15315] loop5: p170 start 10 is beyond EOD, truncated [ 221.385263][T15315] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 221.393002][T15315] loop5: p172 start 225 is beyond EOD, truncated [ 221.399387][T15315] loop5: p173 start 10 is beyond EOD, truncated [ 221.405656][T15315] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 221.413372][T15315] loop5: p175 start 225 is beyond EOD, truncated [ 221.419695][T15315] loop5: p176 start 10 is beyond EOD, truncated [ 221.425990][T15315] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 221.433671][T15315] loop5: p178 start 225 is beyond EOD, truncated [ 221.440022][T15315] loop5: p179 start 10 is beyond EOD, truncated [ 221.446380][T15315] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 221.454249][T15315] loop5: p181 start 225 is beyond EOD, truncated [ 221.460586][T15315] loop5: p182 start 10 is beyond EOD, truncated [ 221.466858][T15315] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 221.474602][T15315] loop5: p184 start 225 is beyond EOD, truncated [ 221.480933][T15315] loop5: p185 start 10 is beyond EOD, truncated [ 221.487180][T15315] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 221.494930][T15315] loop5: p187 start 225 is beyond EOD, truncated [ 221.501275][T15315] loop5: p188 start 10 is beyond EOD, truncated [ 221.507540][T15315] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 221.515111][T15315] loop5: p190 start 225 is beyond EOD, truncated [ 221.521479][T15315] loop5: p191 start 10 is beyond EOD, truncated [ 221.527743][T15315] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 221.535375][T15315] loop5: p193 start 225 is beyond EOD, truncated [ 221.541696][T15315] loop5: p194 start 10 is beyond EOD, truncated [ 221.548023][T15315] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 221.555710][T15315] loop5: p196 start 225 is beyond EOD, truncated [ 221.562104][T15315] loop5: p197 start 10 is beyond EOD, truncated [ 221.568371][T15315] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 221.575963][T15315] loop5: p199 start 225 is beyond EOD, truncated [ 221.582285][T15315] loop5: p200 start 10 is beyond EOD, truncated [ 221.588540][T15315] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 221.596224][T15315] loop5: p202 start 225 is beyond EOD, truncated [ 221.602546][T15315] loop5: p203 start 10 is beyond EOD, truncated [ 221.608847][T15315] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 221.616662][T15315] loop5: p205 start 225 is beyond EOD, truncated [ 221.623017][T15315] loop5: p206 start 10 is beyond EOD, truncated [ 221.629253][T15315] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 221.637074][T15315] loop5: p208 start 225 is beyond EOD, truncated [ 221.643447][T15315] loop5: p209 start 10 is beyond EOD, truncated [ 221.649677][T15315] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 221.657510][T15315] loop5: p211 start 225 is beyond EOD, truncated [ 221.663899][T15315] loop5: p212 start 10 is beyond EOD, truncated [ 221.670160][T15315] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 221.677925][T15315] loop5: p214 start 225 is beyond EOD, truncated [ 221.684307][T15315] loop5: p215 start 10 is beyond EOD, truncated [ 221.690539][T15315] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 221.698215][T15315] loop5: p217 start 225 is beyond EOD, truncated [ 221.704603][T15315] loop5: p218 start 10 is beyond EOD, truncated [ 221.710838][T15315] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 221.718734][T15315] loop5: p220 start 225 is beyond EOD, truncated [ 221.725246][T15315] loop5: p221 start 10 is beyond EOD, truncated [ 221.731557][T15315] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 221.739248][T15315] loop5: p223 start 225 is beyond EOD, truncated [ 221.745785][T15315] loop5: p224 start 10 is beyond EOD, truncated [ 221.752019][T15315] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 221.759789][T15315] loop5: p226 start 225 is beyond EOD, truncated [ 221.766147][T15315] loop5: p227 start 10 is beyond EOD, truncated [ 221.772425][T15315] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 221.780427][T15315] loop5: p229 start 225 is beyond EOD, truncated [ 221.786855][T15315] loop5: p230 start 10 is beyond EOD, truncated [ 221.793105][T15315] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 221.800754][T15315] loop5: p232 start 225 is beyond EOD, truncated [ 221.807181][T15315] loop5: p233 start 10 is beyond EOD, truncated [ 221.813435][T15315] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 221.821117][T15315] loop5: p235 start 225 is beyond EOD, truncated [ 221.827470][T15315] loop5: p236 start 10 is beyond EOD, truncated [ 221.833728][T15315] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 221.841337][T15315] loop5: p238 start 225 is beyond EOD, truncated [ 221.847694][T15315] loop5: p239 start 10 is beyond EOD, truncated [ 221.853951][T15315] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 221.861815][T15315] loop5: p241 start 225 is beyond EOD, truncated [ 221.868188][T15315] loop5: p242 start 10 is beyond EOD, truncated [ 221.874470][T15315] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 221.882137][T15315] loop5: p244 start 225 is beyond EOD, truncated [ 221.888508][T15315] loop5: p245 start 10 is beyond EOD, truncated [ 221.894763][T15315] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 221.902482][T15315] loop5: p247 start 225 is beyond EOD, truncated [ 221.908921][T15315] loop5: p248 start 10 is beyond EOD, truncated [ 221.915295][T15315] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 221.923158][T15315] loop5: p250 start 225 is beyond EOD, truncated [ 221.929486][T15315] loop5: p251 start 10 is beyond EOD, truncated [ 221.935740][T15315] loop5: p252 size 1073872896 extends beyond EOD, truncated [ 221.943468][T15315] loop5: p253 start 225 is beyond EOD, truncated [ 221.949798][T15315] loop5: p254 start 10 is beyond EOD, truncated [ 221.956178][T15315] loop5: p255 size 1073872896 extends beyond EOD, truncated 23:00:16 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:16 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sg(&(0x7f0000001540), 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000)) 23:00:16 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 23:00:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:16 executing program 3: syz_mount_image$iso9660(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) 23:00:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850", 0x2f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB='\b\x00', @ANYRES32], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:00:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r1) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)='\xe7\x90\xf9\xb2\xecA2\xf6/e\x8a\x85\x00\x00\x00\x00\x00\x00\x00\x00\x99\x00\x00\x92/\x95\xb8\xdb\xaf\xb6\xf2\xdc\x13 \xdd\xe5\xfa\x0f.\xac5\xbf\xa3\xe0\x10\xbf6\x7f\xe4B\x0f\x18\xfb\x01\xdc\xd4\x9b\xd3\x8bI\xde)\xb5\xc3\xde\x0e=M\xdb\xc2\\|i*\xd2\x82{\x06K\x7f=\xd7\xbb$,\xa5\xec\xeb\xcb\xc8\xcc\xac\xf9\xf4J\xd1\x88\x91S\x8f\xeb\xd3\x03\x93\x02\xd3\xe0f\x10\xcd\xeaH\xf3\xa9\xee\xac\x1d\xac\xa8\xc8\xec\xbdK\x94\x14?)\x14\x03\xc3\xef\x19\xa0\xf3\xe5]\x94*\xe4\xdf', 0xfffffffffffffffe) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r2) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0) 23:00:16 executing program 4: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = dup2(r1, r2) setns(r3, 0x10000000) 23:00:16 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 23:00:16 executing program 4: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = dup2(r1, r2) setns(r3, 0x10000000) [ 222.237435][T15557] loop5: detected capacity change from 0 to 1 [ 222.317598][T15557] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 222.317789][T15557] loop5: p1 start 10 is beyond EOD, truncated [ 222.411093][T15557] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 222.418957][T15557] loop5: p3 start 225 is beyond EOD, truncated [ 222.425237][T15557] loop5: p4 size 2 extends beyond EOD, truncated [ 222.431992][T15557] loop5: p5 start 10 is beyond EOD, truncated [ 222.438119][T15557] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 222.445772][T15557] loop5: p7 start 225 is beyond EOD, truncated [ 222.451921][T15557] loop5: p8 start 10 is beyond EOD, truncated [ 222.458012][T15557] loop5: p9 size 1073872896 extends beyond EOD, truncated [ 222.465507][T15557] loop5: p10 start 225 is beyond EOD, truncated [ 222.471834][T15557] loop5: p11 start 10 is beyond EOD, truncated [ 222.478113][T15557] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 222.485708][T15557] loop5: p13 start 225 is beyond EOD, truncated [ 222.491945][T15557] loop5: p14 start 10 is beyond EOD, truncated [ 222.498104][T15557] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 222.505646][T15557] loop5: p16 start 225 is beyond EOD, truncated [ 222.511895][T15557] loop5: p17 start 10 is beyond EOD, truncated [ 222.518107][T15557] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 222.525724][T15557] loop5: p19 start 225 is beyond EOD, truncated [ 222.532039][T15557] loop5: p20 start 10 is beyond EOD, truncated [ 222.538285][T15557] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 222.545967][T15557] loop5: p22 start 225 is beyond EOD, truncated [ 222.552222][T15557] loop5: p23 start 10 is beyond EOD, truncated [ 222.558441][T15557] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 222.566003][T15557] loop5: p25 start 225 is beyond EOD, truncated [ 222.572248][T15557] loop5: p26 start 10 is beyond EOD, truncated [ 222.578428][T15557] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 222.586065][T15557] loop5: p28 start 225 is beyond EOD, truncated [ 222.592333][T15557] loop5: p29 start 10 is beyond EOD, truncated [ 222.598511][T15557] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 222.606249][T15557] loop5: p31 start 225 is beyond EOD, truncated [ 222.612543][T15557] loop5: p32 start 10 is beyond EOD, truncated [ 222.618725][T15557] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 222.626518][T15557] loop5: p34 start 225 is beyond EOD, truncated [ 222.632879][T15557] loop5: p35 start 10 is beyond EOD, truncated [ 222.639047][T15557] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 222.646814][T15557] loop5: p37 start 225 is beyond EOD, truncated [ 222.653217][T15557] loop5: p38 start 10 is beyond EOD, truncated [ 222.659415][T15557] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 222.667145][T15557] loop5: p40 start 225 is beyond EOD, truncated [ 222.673441][T15557] loop5: p41 start 10 is beyond EOD, truncated [ 222.679641][T15557] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 222.687452][T15557] loop5: p43 start 225 is beyond EOD, truncated [ 222.693760][T15557] loop5: p44 start 10 is beyond EOD, truncated [ 222.699948][T15557] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 222.707451][T15557] loop5: p46 start 225 is beyond EOD, truncated [ 222.713715][T15557] loop5: p47 start 10 is beyond EOD, truncated [ 222.719859][T15557] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 222.727464][T15557] loop5: p49 start 225 is beyond EOD, truncated [ 222.733786][T15557] loop5: p50 start 10 is beyond EOD, truncated [ 222.739930][T15557] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 222.747583][T15557] loop5: p52 start 225 is beyond EOD, truncated [ 222.753861][T15557] loop5: p53 start 10 is beyond EOD, truncated [ 222.760010][T15557] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 222.767776][T15557] loop5: p55 start 225 is beyond EOD, truncated [ 222.774108][T15557] loop5: p56 start 10 is beyond EOD, truncated [ 222.780251][T15557] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 222.787811][T15557] loop5: p58 start 225 is beyond EOD, truncated [ 222.794096][T15557] loop5: p59 start 10 is beyond EOD, truncated [ 222.800241][T15557] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 222.807758][T15557] loop5: p61 start 225 is beyond EOD, truncated [ 222.814117][T15557] loop5: p62 start 10 is beyond EOD, truncated [ 222.820392][T15557] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 222.827920][T15557] loop5: p64 start 225 is beyond EOD, truncated [ 222.834346][T15557] loop5: p65 start 10 is beyond EOD, truncated [ 222.840490][T15557] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 222.848197][T15557] loop5: p67 start 225 is beyond EOD, truncated [ 222.854558][T15557] loop5: p68 start 10 is beyond EOD, truncated [ 222.860714][T15557] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 222.868324][T15557] loop5: p70 start 225 is beyond EOD, truncated [ 222.874599][T15557] loop5: p71 start 10 is beyond EOD, truncated [ 222.880780][T15557] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 222.888335][T15557] loop5: p73 start 225 is beyond EOD, truncated [ 222.894611][T15557] loop5: p74 start 10 is beyond EOD, truncated [ 222.900756][T15557] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 222.908422][T15557] loop5: p76 start 225 is beyond EOD, truncated [ 222.914700][T15557] loop5: p77 start 10 is beyond EOD, truncated [ 222.920973][T15557] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 222.928436][T15557] loop5: p79 start 225 is beyond EOD, truncated [ 222.934702][T15557] loop5: p80 start 10 is beyond EOD, truncated [ 222.940906][T15557] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 222.948442][T15557] loop5: p82 start 225 is beyond EOD, truncated [ 222.954719][T15557] loop5: p83 start 10 is beyond EOD, truncated [ 222.960865][T15557] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 222.968386][T15557] loop5: p85 start 225 is beyond EOD, truncated [ 222.974668][T15557] loop5: p86 start 10 is beyond EOD, truncated [ 222.980815][T15557] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 222.988704][T15557] loop5: p88 start 225 is beyond EOD, truncated [ 222.995132][T15557] loop5: p89 start 10 is beyond EOD, truncated [ 223.001386][T15557] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 223.009051][T15557] loop5: p91 start 225 is beyond EOD, truncated [ 223.015335][T15557] loop5: p92 start 10 is beyond EOD, truncated [ 223.021498][T15557] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 223.029123][T15557] loop5: p94 start 225 is beyond EOD, truncated [ 223.035392][T15557] loop5: p95 start 10 is beyond EOD, truncated [ 223.041539][T15557] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 223.049129][T15557] loop5: p97 start 225 is beyond EOD, truncated [ 223.055499][T15557] loop5: p98 start 10 is beyond EOD, truncated [ 223.061633][T15557] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 223.069217][T15557] loop5: p100 start 225 is beyond EOD, truncated [ 223.075572][T15557] loop5: p101 start 10 is beyond EOD, truncated [ 223.081843][T15557] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 223.089738][T15557] loop5: p103 start 225 is beyond EOD, truncated [ 223.096169][T15557] loop5: p104 start 10 is beyond EOD, truncated [ 223.102425][T15557] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 223.110015][T15557] loop5: p106 start 225 is beyond EOD, truncated [ 223.116368][T15557] loop5: p107 start 10 is beyond EOD, truncated [ 223.122707][T15557] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 223.130362][T15557] loop5: p109 start 225 is beyond EOD, truncated [ 223.136728][T15557] loop5: p110 start 10 is beyond EOD, truncated [ 223.143019][T15557] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 223.150634][T15557] loop5: p112 start 225 is beyond EOD, truncated [ 223.157135][T15557] loop5: p113 start 10 is beyond EOD, truncated [ 223.163414][T15557] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 223.171290][T15557] loop5: p115 start 225 is beyond EOD, truncated [ 223.177636][T15557] loop5: p116 start 10 is beyond EOD, truncated [ 223.183883][T15557] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 223.191679][T15557] loop5: p118 start 225 is beyond EOD, truncated [ 223.198027][T15557] loop5: p119 start 10 is beyond EOD, truncated [ 223.204281][T15557] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 223.212063][T15557] loop5: p121 start 225 is beyond EOD, truncated [ 223.218438][T15557] loop5: p122 start 10 is beyond EOD, truncated [ 223.224709][T15557] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 223.232381][T15557] loop5: p124 start 225 is beyond EOD, truncated [ 223.238704][T15557] loop5: p125 start 10 is beyond EOD, truncated [ 223.244958][T15557] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 223.252690][T15557] loop5: p127 start 225 is beyond EOD, truncated [ 223.259044][T15557] loop5: p128 start 10 is beyond EOD, truncated [ 223.265300][T15557] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 223.272893][T15557] loop5: p130 start 225 is beyond EOD, truncated [ 223.279296][T15557] loop5: p131 start 10 is beyond EOD, truncated [ 223.285569][T15557] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 223.293284][T15557] loop5: p133 start 225 is beyond EOD, truncated [ 223.299629][T15557] loop5: p134 start 10 is beyond EOD, truncated [ 223.305887][T15557] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 223.313509][T15557] loop5: p136 start 225 is beyond EOD, truncated [ 223.319830][T15557] loop5: p137 start 10 is beyond EOD, truncated [ 223.326095][T15557] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 223.333782][T15557] loop5: p139 start 225 is beyond EOD, truncated [ 223.340102][T15557] loop5: p140 start 10 is beyond EOD, truncated [ 223.346448][T15557] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 223.354167][T15557] loop5: p142 start 225 is beyond EOD, truncated [ 223.360543][T15557] loop5: p143 start 10 is beyond EOD, truncated [ 223.366868][T15557] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 223.374498][T15557] loop5: p145 start 225 is beyond EOD, truncated [ 223.380822][T15557] loop5: p146 start 10 is beyond EOD, truncated [ 223.387176][T15557] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 223.394967][T15557] loop5: p148 start 225 is beyond EOD, truncated [ 223.401290][T15557] loop5: p149 start 10 is beyond EOD, truncated [ 223.407546][T15557] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 223.415377][T15557] loop5: p151 start 225 is beyond EOD, truncated [ 223.421752][T15557] loop5: p152 start 10 is beyond EOD, truncated [ 223.427992][T15557] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 223.435570][T15557] loop5: p154 start 225 is beyond EOD, truncated [ 223.441895][T15557] loop5: p155 start 10 is beyond EOD, truncated [ 223.448178][T15557] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 223.456001][T15557] loop5: p157 start 225 is beyond EOD, truncated [ 223.462355][T15557] loop5: p158 start 10 is beyond EOD, truncated [ 223.468619][T15557] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 223.476232][T15557] loop5: p160 start 225 is beyond EOD, truncated [ 223.482607][T15557] loop5: p161 start 10 is beyond EOD, truncated [ 223.488836][T15557] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 223.496568][T15557] loop5: p163 start 225 is beyond EOD, truncated [ 223.502922][T15557] loop5: p164 start 10 is beyond EOD, truncated [ 223.509208][T15557] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 223.516873][T15557] loop5: p166 start 225 is beyond EOD, truncated [ 223.523227][T15557] loop5: p167 start 10 is beyond EOD, truncated [ 223.529557][T15557] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 223.537515][T15557] loop5: p169 start 225 is beyond EOD, truncated [ 223.543865][T15557] loop5: p170 start 10 is beyond EOD, truncated [ 223.550136][T15557] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 223.558002][T15557] loop5: p172 start 225 is beyond EOD, truncated [ 223.564411][T15557] loop5: p173 start 10 is beyond EOD, truncated [ 223.570644][T15557] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 223.578542][T15557] loop5: p175 start 225 is beyond EOD, truncated [ 223.584963][T15557] loop5: p176 start 10 is beyond EOD, truncated [ 223.591200][T15557] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 223.599286][T15557] loop5: p178 start 225 is beyond EOD, truncated [ 223.606408][T15557] loop5: p179 start 10 is beyond EOD, truncated [ 223.612737][T15557] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 223.620396][T15557] loop5: p181 start 225 is beyond EOD, truncated [ 223.626909][T15557] loop5: p182 start 10 is beyond EOD, truncated [ 223.633174][T15557] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 223.640753][T15557] loop5: p184 start 225 is beyond EOD, truncated [ 223.647216][T15557] loop5: p185 start 10 is beyond EOD, truncated [ 223.653509][T15557] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 223.661181][T15557] loop5: p187 start 225 is beyond EOD, truncated [ 223.667554][T15557] loop5: p188 start 10 is beyond EOD, truncated [ 223.673964][T15557] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 223.681577][T15557] loop5: p190 start 225 is beyond EOD, truncated [ 223.687924][T15557] loop5: p191 start 10 is beyond EOD, truncated [ 223.694200][T15557] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 223.701835][T15557] loop5: p193 start 225 is beyond EOD, truncated [ 223.708181][T15557] loop5: p194 start 10 is beyond EOD, truncated [ 223.714525][T15557] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 223.722219][T15557] loop5: p196 start 225 is beyond EOD, truncated [ 223.728741][T15557] loop5: p197 start 10 is beyond EOD, truncated [ 223.735051][T15557] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 223.742710][T15557] loop5: p199 start 225 is beyond EOD, truncated [ 223.749056][T15557] loop5: p200 start 10 is beyond EOD, truncated [ 223.755436][T15557] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 223.763205][T15557] loop5: p202 start 225 is beyond EOD, truncated [ 223.769614][T15557] loop5: p203 start 10 is beyond EOD, truncated [ 223.775874][T15557] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 223.783498][T15557] loop5: p205 start 225 is beyond EOD, truncated [ 223.789878][T15557] loop5: p206 start 10 is beyond EOD, truncated [ 223.796121][T15557] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 223.803884][T15557] loop5: p208 start 225 is beyond EOD, truncated [ 223.810221][T15557] loop5: p209 start 10 is beyond EOD, truncated [ 223.816514][T15557] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 223.824195][T15557] loop5: p211 start 225 is beyond EOD, truncated [ 223.830523][T15557] loop5: p212 start 10 is beyond EOD, truncated [ 223.836792][T15557] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 223.844469][T15557] loop5: p214 start 225 is beyond EOD, truncated [ 223.850793][T15557] loop5: p215 start 10 is beyond EOD, truncated [ 223.857080][T15557] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 223.864814][T15557] loop5: p217 start 225 is beyond EOD, truncated [ 223.871135][T15557] loop5: p218 start 10 is beyond EOD, truncated [ 223.877427][T15557] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 223.885172][T15557] loop5: p220 start 225 is beyond EOD, truncated [ 223.891543][T15557] loop5: p221 start 10 is beyond EOD, truncated [ 223.897795][T15557] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 223.905622][T15557] loop5: p223 start 225 is beyond EOD, truncated [ 223.912026][T15557] loop5: p224 start 10 is beyond EOD, truncated [ 223.918322][T15557] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 223.926000][T15557] loop5: p226 start 225 is beyond EOD, truncated [ 223.932348][T15557] loop5: p227 start 10 is beyond EOD, truncated [ 223.938574][T15557] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 223.946350][T15557] loop5: p229 start 225 is beyond EOD, truncated [ 223.952721][T15557] loop5: p230 start 10 is beyond EOD, truncated [ 223.958956][T15557] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 223.966765][T15557] loop5: p232 start 225 is beyond EOD, truncated [ 223.973128][T15557] loop5: p233 start 10 is beyond EOD, truncated [ 223.979420][T15557] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 223.987193][T15557] loop5: p235 start 225 is beyond EOD, truncated [ 223.993547][T15557] loop5: p236 start 10 is beyond EOD, truncated [ 223.999777][T15557] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 224.007488][T15557] loop5: p238 start 225 is beyond EOD, truncated [ 224.013842][T15557] loop5: p239 start 10 is beyond EOD, truncated [ 224.020153][T15557] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 224.027912][T15557] loop5: p241 start 225 is beyond EOD, truncated [ 224.034259][T15557] loop5: p242 start 10 is beyond EOD, truncated [ 224.040506][T15557] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 224.048169][T15557] loop5: p244 start 225 is beyond EOD, truncated [ 224.054526][T15557] loop5: p245 start 10 is beyond EOD, truncated [ 224.060755][T15557] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 224.068557][T15557] loop5: p247 start 225 is beyond EOD, truncated [ 224.074972][T15557] loop5: p248 start 10 is beyond EOD, truncated [ 224.081252][T15557] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 224.089099][T15557] loop5: p250 start 225 is beyond EOD, truncated [ 224.095467][T15557] loop5: p251 start 10 is beyond EOD, truncated [ 224.101734][T15557] loop5: p252 size 1073872896 extends beyond EOD, truncated [ 224.109537][T15557] loop5: p253 start 225 is beyond EOD, truncated [ 224.115910][T15557] loop5: p254 start 10 is beyond EOD, truncated [ 224.122146][T15557] loop5: p255 size 1073872896 extends beyond EOD, truncated 23:00:18 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac0000ffffffa5000800000000000000024000ffffff82000000e100000088770072003007000f00000000000000008000da55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 23:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:18 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_regs}) 23:00:18 executing program 4: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = dup2(r1, r2) setns(r3, 0x10000000) 23:00:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00') 23:00:18 executing program 4: r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = dup2(r1, r2) setns(r3, 0x10000000) 23:00:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 23:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:18 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_regs}) 23:00:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) [ 224.222714][ T1029] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 224.235797][ T1029] loop5: p1 start 10 is beyond EOD, truncated [ 224.328806][ T1029] loop5: p2 size 1073872896 extends beyond EOD, truncated 23:00:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00') [ 224.361870][ T1029] loop5: p3 start 225 is beyond EOD, truncated [ 224.368087][ T1029] loop5: p4 size 2 extends beyond EOD, truncated [ 224.398331][ T1029] loop5: p5 start 10 is beyond EOD, truncated [ 224.404461][ T1029] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 224.417425][ T1029] loop5: p7 start 225 is beyond EOD, truncated [ 224.423654][ T1029] loop5: p8 start 10 is beyond EOD, truncated [ 224.429783][ T1029] loop5: p9 size 1073872896 extends beyond EOD, truncated [ 224.437266][ T1029] loop5: p10 start 225 is beyond EOD, truncated [ 224.443565][ T1029] loop5: p11 start 10 is beyond EOD, truncated [ 224.449705][ T1029] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 224.457391][ T1029] loop5: p13 start 225 is beyond EOD, truncated [ 224.463718][ T1029] loop5: p14 start 10 is beyond EOD, truncated [ 224.469922][ T1029] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 224.477492][ T1029] loop5: p16 start 225 is beyond EOD, truncated [ 224.483756][ T1029] loop5: p17 start 10 is beyond EOD, truncated [ 224.489944][ T1029] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 224.497620][ T1029] loop5: p19 start 225 is beyond EOD, truncated [ 224.503898][ T1029] loop5: p20 start 10 is beyond EOD, truncated [ 224.510037][ T1029] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 224.517586][ T1029] loop5: p22 start 225 is beyond EOD, truncated [ 224.523845][ T1029] loop5: p23 start 10 is beyond EOD, truncated [ 224.529995][ T1029] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 224.537551][ T1029] loop5: p25 start 225 is beyond EOD, truncated [ 224.543837][ T1029] loop5: p26 start 10 is beyond EOD, truncated [ 224.549978][ T1029] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 224.557537][ T1029] loop5: p28 start 225 is beyond EOD, truncated [ 224.563810][ T1029] loop5: p29 start 10 is beyond EOD, truncated [ 224.569992][ T1029] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 224.577631][ T1029] loop5: p31 start 225 is beyond EOD, truncated [ 224.583905][ T1029] loop5: p32 start 10 is beyond EOD, truncated [ 224.590044][ T1029] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 224.597722][ T1029] loop5: p34 start 225 is beyond EOD, truncated [ 224.604030][ T1029] loop5: p35 start 10 is beyond EOD, truncated [ 224.610461][ T1029] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 224.618153][ T1029] loop5: p37 start 225 is beyond EOD, truncated [ 224.624441][ T1029] loop5: p38 start 10 is beyond EOD, truncated [ 224.630655][ T1029] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 224.638339][ T1029] loop5: p40 start 225 is beyond EOD, truncated [ 224.644693][ T1029] loop5: p41 start 10 is beyond EOD, truncated [ 224.650886][ T1029] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 224.658347][ T1029] loop5: p43 start 225 is beyond EOD, truncated [ 224.664781][ T1029] loop5: p44 start 10 is beyond EOD, truncated [ 224.671000][ T1029] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 224.678571][ T1029] loop5: p46 start 225 is beyond EOD, truncated [ 224.684911][ T1029] loop5: p47 start 10 is beyond EOD, truncated [ 224.691055][ T1029] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 224.698567][ T1029] loop5: p49 start 225 is beyond EOD, truncated [ 224.704827][ T1029] loop5: p50 start 10 is beyond EOD, truncated [ 224.711007][ T1029] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 224.718706][ T1029] loop5: p52 start 225 is beyond EOD, truncated [ 224.725086][ T1029] loop5: p53 start 10 is beyond EOD, truncated [ 224.731221][ T1029] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 224.738845][ T1029] loop5: p55 start 225 is beyond EOD, truncated [ 224.745109][ T1029] loop5: p56 start 10 is beyond EOD, truncated [ 224.751254][ T1029] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 224.758866][ T1029] loop5: p58 start 225 is beyond EOD, truncated [ 224.765276][ T1029] loop5: p59 start 10 is beyond EOD, truncated [ 224.771450][ T1029] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 224.779154][ T1029] loop5: p61 start 225 is beyond EOD, truncated [ 224.785441][ T1029] loop5: p62 start 10 is beyond EOD, truncated [ 224.791666][ T1029] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 224.799153][ T1029] loop5: p64 start 225 is beyond EOD, truncated [ 224.805515][ T1029] loop5: p65 start 10 is beyond EOD, truncated [ 224.811652][ T1029] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 224.819226][ T1029] loop5: p67 start 225 is beyond EOD, truncated [ 224.825485][ T1029] loop5: p68 start 10 is beyond EOD, truncated [ 224.831666][ T1029] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 224.839202][ T1029] loop5: p70 start 225 is beyond EOD, truncated [ 224.845461][ T1029] loop5: p71 start 10 is beyond EOD, truncated [ 224.851656][ T1029] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 224.859324][ T1029] loop5: p73 start 225 is beyond EOD, truncated [ 224.865662][ T1029] loop5: p74 start 10 is beyond EOD, truncated [ 224.871817][ T1029] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 224.879431][ T1029] loop5: p76 start 225 is beyond EOD, truncated [ 224.885760][ T1029] loop5: p77 start 10 is beyond EOD, truncated [ 224.891948][ T1029] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 224.899416][ T1029] loop5: p79 start 225 is beyond EOD, truncated [ 224.905783][ T1029] loop5: p80 start 10 is beyond EOD, truncated [ 224.911925][ T1029] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 224.919456][ T1029] loop5: p82 start 225 is beyond EOD, truncated [ 224.925806][ T1029] loop5: p83 start 10 is beyond EOD, truncated [ 224.932002][ T1029] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 224.939555][ T1029] loop5: p85 start 225 is beyond EOD, truncated [ 224.945825][ T1029] loop5: p86 start 10 is beyond EOD, truncated [ 224.951986][ T1029] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 224.959614][ T1029] loop5: p88 start 225 is beyond EOD, truncated [ 224.965981][ T1029] loop5: p89 start 10 is beyond EOD, truncated [ 224.972124][ T1029] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 224.979626][ T1029] loop5: p91 start 225 is beyond EOD, truncated [ 224.985901][ T1029] loop5: p92 start 10 is beyond EOD, truncated [ 224.992047][ T1029] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 224.999753][ T1029] loop5: p94 start 225 is beyond EOD, truncated [ 225.006113][ T1029] loop5: p95 start 10 is beyond EOD, truncated [ 225.012269][ T1029] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 225.020026][ T1029] loop5: p97 start 225 is beyond EOD, truncated [ 225.026286][ T1029] loop5: p98 start 10 is beyond EOD, truncated [ 225.032450][ T1029] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 225.040027][ T1029] loop5: p100 start 225 is beyond EOD, truncated [ 225.046414][ T1029] loop5: p101 start 10 is beyond EOD, truncated [ 225.052691][ T1029] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 225.060312][ T1029] loop5: p103 start 225 is beyond EOD, truncated [ 225.066748][ T1029] loop5: p104 start 10 is beyond EOD, truncated [ 225.073062][ T1029] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 225.080673][ T1029] loop5: p106 start 225 is beyond EOD, truncated [ 225.087102][ T1029] loop5: p107 start 10 is beyond EOD, truncated [ 225.093366][ T1029] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 225.100958][ T1029] loop5: p109 start 225 is beyond EOD, truncated [ 225.107298][ T1029] loop5: p110 start 10 is beyond EOD, truncated [ 225.113600][ T1029] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 225.121198][ T1029] loop5: p112 start 225 is beyond EOD, truncated [ 225.127535][ T1029] loop5: p113 start 10 is beyond EOD, truncated [ 225.133806][ T1029] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 225.141505][ T1029] loop5: p115 start 225 is beyond EOD, truncated [ 225.147982][ T1029] loop5: p116 start 10 is beyond EOD, truncated [ 225.154259][ T1029] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 225.161854][ T1029] loop5: p118 start 225 is beyond EOD, truncated [ 225.168193][ T1029] loop5: p119 start 10 is beyond EOD, truncated [ 225.174454][ T1029] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 225.182181][ T1029] loop5: p121 start 225 is beyond EOD, truncated [ 225.188502][ T1029] loop5: p122 start 10 is beyond EOD, truncated [ 225.194781][ T1029] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 225.202454][ T1029] loop5: p124 start 225 is beyond EOD, truncated [ 225.208773][ T1029] loop5: p125 start 10 is beyond EOD, truncated [ 225.215088][ T1029] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 225.222771][ T1029] loop5: p127 start 225 is beyond EOD, truncated [ 225.229086][ T1029] loop5: p128 start 10 is beyond EOD, truncated [ 225.235368][ T1029] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 225.243098][ T1029] loop5: p130 start 225 is beyond EOD, truncated [ 225.249419][ T1029] loop5: p131 start 10 is beyond EOD, truncated [ 225.255762][ T1029] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 225.263414][ T1029] loop5: p133 start 225 is beyond EOD, truncated [ 225.269731][ T1029] loop5: p134 start 10 is beyond EOD, truncated [ 225.276113][ T1029] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 225.283726][ T1029] loop5: p136 start 225 is beyond EOD, truncated [ 225.290043][ T1029] loop5: p137 start 10 is beyond EOD, truncated [ 225.296281][ T1029] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 225.304026][ T1029] loop5: p139 start 225 is beyond EOD, truncated [ 225.310394][ T1029] loop5: p140 start 10 is beyond EOD, truncated [ 225.316631][ T1029] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 225.324260][ T1029] loop5: p142 start 225 is beyond EOD, truncated [ 225.330593][ T1029] loop5: p143 start 10 is beyond EOD, truncated [ 225.336854][ T1029] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 225.344642][ T1029] loop5: p145 start 225 is beyond EOD, truncated [ 225.350976][ T1029] loop5: p146 start 10 is beyond EOD, truncated [ 225.357214][ T1029] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 225.365126][ T1029] loop5: p148 start 225 is beyond EOD, truncated [ 225.371462][ T1029] loop5: p149 start 10 is beyond EOD, truncated [ 225.377946][ T1029] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 225.385506][ T1029] loop5: p151 start 225 is beyond EOD, truncated [ 225.391826][ T1029] loop5: p152 start 10 is beyond EOD, truncated [ 225.398111][ T1029] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 225.405952][ T1029] loop5: p154 start 225 is beyond EOD, truncated [ 225.412298][ T1029] loop5: p155 start 10 is beyond EOD, truncated [ 225.418579][ T1029] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 225.426274][ T1029] loop5: p157 start 225 is beyond EOD, truncated [ 225.432620][ T1029] loop5: p158 start 10 is beyond EOD, truncated [ 225.438892][ T1029] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 225.446676][ T1029] loop5: p160 start 225 is beyond EOD, truncated [ 225.453094][ T1029] loop5: p161 start 10 is beyond EOD, truncated [ 225.459324][ T1029] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 225.467119][ T1029] loop5: p163 start 225 is beyond EOD, truncated [ 225.473468][ T1029] loop5: p164 start 10 is beyond EOD, truncated [ 225.479726][ T1029] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 225.487392][ T1029] loop5: p166 start 225 is beyond EOD, truncated [ 225.493756][ T1029] loop5: p167 start 10 is beyond EOD, truncated [ 225.500032][ T1029] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 225.507849][ T1029] loop5: p169 start 225 is beyond EOD, truncated [ 225.514221][ T1029] loop5: p170 start 10 is beyond EOD, truncated [ 225.520461][ T1029] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 225.528287][ T1029] loop5: p172 start 225 is beyond EOD, truncated [ 225.534727][ T1029] loop5: p173 start 10 is beyond EOD, truncated [ 225.541022][ T1029] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 225.548681][ T1029] loop5: p175 start 225 is beyond EOD, truncated [ 225.555052][ T1029] loop5: p176 start 10 is beyond EOD, truncated [ 225.561280][ T1029] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 225.568899][ T1029] loop5: p178 start 225 is beyond EOD, truncated [ 225.575347][ T1029] loop5: p179 start 10 is beyond EOD, truncated [ 225.581577][ T1029] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 225.589329][ T1029] loop5: p181 start 225 is beyond EOD, truncated [ 225.595719][ T1029] loop5: p182 start 10 is beyond EOD, truncated [ 225.601948][ T1029] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 225.609682][ T1029] loop5: p184 start 225 is beyond EOD, truncated [ 225.616109][ T1029] loop5: p185 start 10 is beyond EOD, truncated [ 225.622458][ T1029] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 225.630133][ T1029] loop5: p187 start 225 is beyond EOD, truncated [ 225.636523][ T1029] loop5: p188 start 10 is beyond EOD, truncated [ 225.642801][ T1029] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 225.650406][ T1029] loop5: p190 start 225 is beyond EOD, truncated [ 225.656772][ T1029] loop5: p191 start 10 is beyond EOD, truncated [ 225.663069][ T1029] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 225.670760][ T1029] loop5: p193 start 225 is beyond EOD, truncated [ 225.677101][ T1029] loop5: p194 start 10 is beyond EOD, truncated [ 225.683399][ T1029] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 225.690993][ T1029] loop5: p196 start 225 is beyond EOD, truncated [ 225.697582][ T1029] loop5: p197 start 10 is beyond EOD, truncated [ 225.703870][ T1029] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 225.711540][ T1029] loop5: p199 start 225 is beyond EOD, truncated [ 225.717944][ T1029] loop5: p200 start 10 is beyond EOD, truncated [ 225.724235][ T1029] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 225.731869][ T1029] loop5: p202 start 225 is beyond EOD, truncated [ 225.738231][ T1029] loop5: p203 start 10 is beyond EOD, truncated [ 225.744483][ T1029] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 225.752233][ T1029] loop5: p205 start 225 is beyond EOD, truncated [ 225.758587][ T1029] loop5: p206 start 10 is beyond EOD, truncated [ 225.764985][ T1029] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 225.772748][ T1029] loop5: p208 start 225 is beyond EOD, truncated [ 225.779071][ T1029] loop5: p209 start 10 is beyond EOD, truncated [ 225.785314][ T1029] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 225.792969][ T1029] loop5: p211 start 225 is beyond EOD, truncated [ 225.799365][ T1029] loop5: p212 start 10 is beyond EOD, truncated [ 225.805653][ T1029] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 225.813409][ T1029] loop5: p214 start 225 is beyond EOD, truncated [ 225.819742][ T1029] loop5: p215 start 10 is beyond EOD, truncated [ 225.826001][ T1029] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 225.833794][ T1029] loop5: p217 start 225 is beyond EOD, truncated [ 225.840186][ T1029] loop5: p218 start 10 is beyond EOD, truncated [ 225.846481][ T1029] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 225.854207][ T1029] loop5: p220 start 225 is beyond EOD, truncated [ 225.860638][ T1029] loop5: p221 start 10 is beyond EOD, truncated [ 225.866894][ T1029] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 225.874576][ T1029] loop5: p223 start 225 is beyond EOD, truncated [ 225.880915][ T1029] loop5: p224 start 10 is beyond EOD, truncated [ 225.887217][ T1029] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 225.894978][ T1029] loop5: p226 start 225 is beyond EOD, truncated [ 225.901305][ T1029] loop5: p227 start 10 is beyond EOD, truncated [ 225.907547][ T1029] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 225.915449][ T1029] loop5: p229 start 225 is beyond EOD, truncated [ 225.921769][ T1029] loop5: p230 start 10 is beyond EOD, truncated [ 225.928012][ T1029] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 225.935595][ T1029] loop5: p232 start 225 is beyond EOD, truncated [ 225.941950][ T1029] loop5: p233 start 10 is beyond EOD, truncated [ 225.948203][ T1029] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 225.956030][ T1029] loop5: p235 start 225 is beyond EOD, truncated [ 225.962371][ T1029] loop5: p236 start 10 is beyond EOD, truncated [ 225.968660][ T1029] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 225.976349][ T1029] loop5: p238 start 225 is beyond EOD, truncated [ 225.982696][ T1029] loop5: p239 start 10 is beyond EOD, truncated [ 225.988939][ T1029] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 225.996636][ T1029] loop5: p241 start 225 is beyond EOD, truncated [ 226.002986][ T1029] loop5: p242 start 10 is beyond EOD, truncated [ 226.009214][ T1029] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 226.017050][ T1029] loop5: p244 start 225 is beyond EOD, truncated [ 226.023398][ T1029] loop5: p245 start 10 is beyond EOD, truncated [ 226.029647][ T1029] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 226.037584][ T1029] loop5: p247 start 225 is beyond EOD, truncated [ 226.043978][ T1029] loop5: p248 start 10 is beyond EOD, truncated [ 226.050293][ T1029] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 226.057960][ T1029] loop5: p250 start 225 is beyond EOD, truncated [ 226.064312][ T1029] loop5: p251 start 10 is beyond EOD, truncated [ 226.070541][ T1029] loop5: p252 size 1073872896 extends beyond EOD, truncated [ 226.078289][ T1029] loop5: p253 start 225 is beyond EOD, truncated [ 226.084636][ T1029] loop5: p254 start 10 is beyond EOD, truncated [ 226.090918][ T1029] loop5: p255 size 1073872896 extends beyond EOD, truncated [ 226.216340][T16029] loop5: detected capacity change from 0 to 1 [ 226.267131][T16029] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 226.267409][T16029] loop5: p1 start 10 is beyond EOD, truncated [ 226.360325][T16029] loop5: p2 size 1073872896 extends beyond EOD, truncated [ 226.368086][T16029] loop5: p3 start 225 is beyond EOD, truncated [ 226.374276][T16029] loop5: p4 size 2 extends beyond EOD, truncated [ 226.381417][T16029] loop5: p5 start 10 is beyond EOD, truncated [ 226.387698][T16029] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 226.395161][T16029] loop5: p7 start 225 is beyond EOD, truncated [ 226.401441][T16029] loop5: p8 start 10 is beyond EOD, truncated [ 226.407512][T16029] loop5: p9 size 1073872896 extends beyond EOD, truncated [ 226.415171][T16029] loop5: p10 start 225 is beyond EOD, truncated [ 226.421466][T16029] loop5: p11 start 10 is beyond EOD, truncated [ 226.427627][T16029] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 226.435245][T16029] loop5: p13 start 225 is beyond EOD, truncated [ 226.441497][T16029] loop5: p14 start 10 is beyond EOD, truncated [ 226.447672][T16029] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 226.455471][T16029] loop5: p16 start 225 is beyond EOD, truncated [ 226.461762][T16029] loop5: p17 start 10 is beyond EOD, truncated [ 226.467971][T16029] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 226.475638][T16029] loop5: p19 start 225 is beyond EOD, truncated [ 226.481987][T16029] loop5: p20 start 10 is beyond EOD, truncated [ 226.488146][T16029] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 226.496095][T16029] loop5: p22 start 225 is beyond EOD, truncated [ 226.502371][T16029] loop5: p23 start 10 is beyond EOD, truncated [ 226.508511][T16029] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 226.516111][T16029] loop5: p25 start 225 is beyond EOD, truncated [ 226.522380][T16029] loop5: p26 start 10 is beyond EOD, truncated [ 226.528523][T16029] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 226.536191][T16029] loop5: p28 start 225 is beyond EOD, truncated [ 226.542493][T16029] loop5: p29 start 10 is beyond EOD, truncated [ 226.548637][T16029] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 226.556274][T16029] loop5: p31 start 225 is beyond EOD, truncated [ 226.562545][T16029] loop5: p32 start 10 is beyond EOD, truncated [ 226.568776][T16029] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 226.576502][T16029] loop5: p34 start 225 is beyond EOD, truncated [ 226.582770][T16029] loop5: p35 start 10 is beyond EOD, truncated [ 226.588922][T16029] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 226.596573][T16029] loop5: p37 start 225 is beyond EOD, truncated [ 226.602846][T16029] loop5: p38 start 10 is beyond EOD, truncated [ 226.609039][T16029] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 226.616930][T16029] loop5: p40 start 225 is beyond EOD, truncated [ 226.623223][T16029] loop5: p41 start 10 is beyond EOD, truncated [ 226.629365][T16029] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 226.637135][T16029] loop5: p43 start 225 is beyond EOD, truncated [ 226.643460][T16029] loop5: p44 start 10 is beyond EOD, truncated [ 226.649600][T16029] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 226.657456][T16029] loop5: p46 start 225 is beyond EOD, truncated [ 226.663729][T16029] loop5: p47 start 10 is beyond EOD, truncated [ 226.669869][T16029] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 226.677579][T16029] loop5: p49 start 225 is beyond EOD, truncated [ 226.683897][T16029] loop5: p50 start 10 is beyond EOD, truncated [ 226.690099][T16029] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 226.697979][T16029] loop5: p52 start 225 is beyond EOD, truncated [ 226.704257][T16029] loop5: p53 start 10 is beyond EOD, truncated [ 226.710402][T16029] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 226.717943][T16029] loop5: p55 start 225 is beyond EOD, truncated [ 226.724229][T16029] loop5: p56 start 10 is beyond EOD, truncated [ 226.730393][T16029] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 226.737925][T16029] loop5: p58 start 225 is beyond EOD, truncated [ 226.744314][T16029] loop5: p59 start 10 is beyond EOD, truncated [ 226.750513][T16029] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 226.758264][T16029] loop5: p61 start 225 is beyond EOD, truncated [ 226.764557][T16029] loop5: p62 start 10 is beyond EOD, truncated [ 226.770763][T16029] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 226.778536][T16029] loop5: p64 start 225 is beyond EOD, truncated [ 226.784953][T16029] loop5: p65 start 10 is beyond EOD, truncated [ 226.791214][T16029] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 226.798930][T16029] loop5: p67 start 225 is beyond EOD, truncated [ 226.805211][T16029] loop5: p68 start 10 is beyond EOD, truncated [ 226.811358][T16029] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 226.819050][T16029] loop5: p70 start 225 is beyond EOD, truncated [ 226.825330][T16029] loop5: p71 start 10 is beyond EOD, truncated [ 226.831474][T16029] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 226.839121][T16029] loop5: p73 start 225 is beyond EOD, truncated [ 226.845451][T16029] loop5: p74 start 10 is beyond EOD, truncated [ 226.851649][T16029] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 226.859433][T16029] loop5: p76 start 225 is beyond EOD, truncated [ 226.865703][T16029] loop5: p77 start 10 is beyond EOD, truncated [ 226.871848][T16029] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 226.879744][T16029] loop5: p79 start 225 is beyond EOD, truncated [ 226.886063][T16029] loop5: p80 start 10 is beyond EOD, truncated [ 226.892322][T16029] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 226.900159][T16029] loop5: p82 start 225 is beyond EOD, truncated [ 226.906511][T16029] loop5: p83 start 10 is beyond EOD, truncated [ 226.912727][T16029] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 226.920337][T16029] loop5: p85 start 225 is beyond EOD, truncated [ 226.926720][T16029] loop5: p86 start 10 is beyond EOD, truncated [ 226.932927][T16029] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 226.940568][T16029] loop5: p88 start 225 is beyond EOD, truncated [ 226.946850][T16029] loop5: p89 start 10 is beyond EOD, truncated [ 226.953026][T16029] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 226.960551][T16029] loop5: p91 start 225 is beyond EOD, truncated [ 226.966808][T16029] loop5: p92 start 10 is beyond EOD, truncated [ 226.973056][T16029] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 226.980625][T16029] loop5: p94 start 225 is beyond EOD, truncated [ 226.986926][T16029] loop5: p95 start 10 is beyond EOD, truncated [ 226.993211][T16029] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 227.000749][T16029] loop5: p97 start 225 is beyond EOD, truncated [ 227.007024][T16029] loop5: p98 start 10 is beyond EOD, truncated [ 227.013188][T16029] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 227.020714][T16029] loop5: p100 start 225 is beyond EOD, truncated [ 227.027072][T16029] loop5: p101 start 10 is beyond EOD, truncated [ 227.033320][T16029] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 227.041082][T16029] loop5: p103 start 225 is beyond EOD, truncated [ 227.047483][T16029] loop5: p104 start 10 is beyond EOD, truncated [ 227.053743][T16029] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 227.061515][T16029] loop5: p106 start 225 is beyond EOD, truncated [ 227.067909][T16029] loop5: p107 start 10 is beyond EOD, truncated [ 227.074181][T16029] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 227.081954][T16029] loop5: p109 start 225 is beyond EOD, truncated [ 227.088273][T16029] loop5: p110 start 10 is beyond EOD, truncated [ 227.094515][T16029] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 227.102186][T16029] loop5: p112 start 225 is beyond EOD, truncated [ 227.108531][T16029] loop5: p113 start 10 is beyond EOD, truncated [ 227.114776][T16029] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 227.122352][T16029] loop5: p115 start 225 is beyond EOD, truncated [ 227.128716][T16029] loop5: p116 start 10 is beyond EOD, truncated [ 227.134975][T16029] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 227.142678][T16029] loop5: p118 start 225 is beyond EOD, truncated [ 227.149012][T16029] loop5: p119 start 10 is beyond EOD, truncated [ 227.155265][T16029] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 227.162860][T16029] loop5: p121 start 225 is beyond EOD, truncated [ 227.169184][T16029] loop5: p122 start 10 is beyond EOD, truncated [ 227.175500][T16029] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 227.183196][T16029] loop5: p124 start 225 is beyond EOD, truncated [ 227.189549][T16029] loop5: p125 start 10 is beyond EOD, truncated [ 227.195796][T16029] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 227.203430][T16029] loop5: p127 start 225 is beyond EOD, truncated [ 227.209752][T16029] loop5: p128 start 10 is beyond EOD, truncated [ 227.215994][T16029] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 227.223900][T16029] loop5: p130 start 225 is beyond EOD, truncated [ 227.230222][T16029] loop5: p131 start 10 is beyond EOD, truncated [ 227.236469][T16029] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 227.244108][T16029] loop5: p133 start 225 is beyond EOD, truncated [ 227.250466][T16029] loop5: p134 start 10 is beyond EOD, truncated [ 227.256731][T16029] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 227.264513][T16029] loop5: p136 start 225 is beyond EOD, truncated [ 227.270836][T16029] loop5: p137 start 10 is beyond EOD, truncated [ 227.277117][T16029] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 227.284748][T16029] loop5: p139 start 225 is beyond EOD, truncated [ 227.291071][T16029] loop5: p140 start 10 is beyond EOD, truncated [ 227.297326][T16029] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 227.305187][T16029] loop5: p142 start 225 is beyond EOD, truncated [ 227.311551][T16029] loop5: p143 start 10 is beyond EOD, truncated [ 227.317808][T16029] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 227.325567][T16029] loop5: p145 start 225 is beyond EOD, truncated [ 227.331915][T16029] loop5: p146 start 10 is beyond EOD, truncated [ 227.338161][T16029] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 227.346055][T16029] loop5: p148 start 225 is beyond EOD, truncated [ 227.352492][T16029] loop5: p149 start 10 is beyond EOD, truncated [ 227.358729][T16029] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 227.366351][T16029] loop5: p151 start 225 is beyond EOD, truncated [ 227.372764][T16029] loop5: p152 start 10 is beyond EOD, truncated [ 227.378997][T16029] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 227.386886][T16029] loop5: p154 start 225 is beyond EOD, truncated [ 227.393290][T16029] loop5: p155 start 10 is beyond EOD, truncated [ 227.399524][T16029] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 227.407339][T16029] loop5: p157 start 225 is beyond EOD, truncated [ 227.413698][T16029] loop5: p158 start 10 is beyond EOD, truncated [ 227.419988][T16029] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 227.427685][T16029] loop5: p160 start 225 is beyond EOD, truncated [ 227.434114][T16029] loop5: p161 start 10 is beyond EOD, truncated [ 227.440341][T16029] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 227.448027][T16029] loop5: p163 start 225 is beyond EOD, truncated [ 227.454437][T16029] loop5: p164 start 10 is beyond EOD, truncated [ 227.460722][T16029] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 227.468629][T16029] loop5: p166 start 225 is beyond EOD, truncated [ 227.474985][T16029] loop5: p167 start 10 is beyond EOD, truncated [ 227.481288][T16029] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 227.488940][T16029] loop5: p169 start 225 is beyond EOD, truncated [ 227.495414][T16029] loop5: p170 start 10 is beyond EOD, truncated [ 227.501662][T16029] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 227.509555][T16029] loop5: p172 start 225 is beyond EOD, truncated [ 227.515935][T16029] loop5: p173 start 10 is beyond EOD, truncated [ 227.522187][T16029] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 227.529752][T16029] loop5: p175 start 225 is beyond EOD, truncated [ 227.536098][T16029] loop5: p176 start 10 is beyond EOD, truncated [ 227.542376][T16029] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 227.549965][T16029] loop5: p178 start 225 is beyond EOD, truncated [ 227.556318][T16029] loop5: p179 start 10 is beyond EOD, truncated [ 227.562666][T16029] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 227.570237][T16029] loop5: p181 start 225 is beyond EOD, truncated [ 227.576585][T16029] loop5: p182 start 10 is beyond EOD, truncated [ 227.582868][T16029] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 227.590525][T16029] loop5: p184 start 225 is beyond EOD, truncated [ 227.596892][T16029] loop5: p185 start 10 is beyond EOD, truncated [ 227.603152][T16029] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 227.610845][T16029] loop5: p187 start 225 is beyond EOD, truncated [ 227.617214][T16029] loop5: p188 start 10 is beyond EOD, truncated [ 227.623500][T16029] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 227.631352][T16029] loop5: p190 start 225 is beyond EOD, truncated [ 227.637726][T16029] loop5: p191 start 10 is beyond EOD, truncated [ 227.643975][T16029] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 227.651627][T16029] loop5: p193 start 225 is beyond EOD, truncated [ 227.657994][T16029] loop5: p194 start 10 is beyond EOD, truncated [ 227.664250][T16029] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 227.671910][T16029] loop5: p196 start 225 is beyond EOD, truncated [ 227.678252][T16029] loop5: p197 start 10 is beyond EOD, truncated [ 227.684492][T16029] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 227.692298][T16029] loop5: p199 start 225 is beyond EOD, truncated [ 227.698680][T16029] loop5: p200 start 10 is beyond EOD, truncated [ 227.704960][T16029] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 227.712810][T16029] loop5: p202 start 225 is beyond EOD, truncated [ 227.719151][T16029] loop5: p203 start 10 is beyond EOD, truncated [ 227.725385][T16029] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 227.733090][T16029] loop5: p205 start 225 is beyond EOD, truncated [ 227.739418][T16029] loop5: p206 start 10 is beyond EOD, truncated [ 227.745694][T16029] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 227.753311][T16029] loop5: p208 start 225 is beyond EOD, truncated [ 227.759705][T16029] loop5: p209 start 10 is beyond EOD, truncated [ 227.766007][T16029] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 227.773606][T16029] loop5: p211 start 225 is beyond EOD, truncated [ 227.779931][T16029] loop5: p212 start 10 is beyond EOD, truncated [ 227.786206][T16029] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 227.794036][T16029] loop5: p214 start 225 is beyond EOD, truncated [ 227.800371][T16029] loop5: p215 start 10 is beyond EOD, truncated [ 227.806630][T16029] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 227.814235][T16029] loop5: p217 start 225 is beyond EOD, truncated [ 227.820575][T16029] loop5: p218 start 10 is beyond EOD, truncated [ 227.826864][T16029] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 227.834760][T16029] loop5: p220 start 225 is beyond EOD, truncated [ 227.841089][T16029] loop5: p221 start 10 is beyond EOD, truncated [ 227.847345][T16029] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 227.855110][T16029] loop5: p223 start 225 is beyond EOD, truncated [ 227.861470][T16029] loop5: p224 start 10 is beyond EOD, truncated [ 227.867785][T16029] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 227.875422][T16029] loop5: p226 start 225 is beyond EOD, truncated [ 227.881749][T16029] loop5: p227 start 10 is beyond EOD, truncated [ 227.888002][T16029] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 227.895593][T16029] loop5: p229 start 225 is beyond EOD, truncated [ 227.901949][T16029] loop5: p230 start 10 is beyond EOD, truncated [ 227.908307][T16029] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 227.916123][T16029] loop5: p232 start 225 is beyond EOD, truncated [ 227.922556][T16029] loop5: p233 start 10 is beyond EOD, truncated [ 227.928784][T16029] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 227.936397][T16029] loop5: p235 start 225 is beyond EOD, truncated [ 227.942748][T16029] loop5: p236 start 10 is beyond EOD, truncated [ 227.949063][T16029] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 227.956778][T16029] loop5: p238 start 225 is beyond EOD, truncated [ 227.963228][T16029] loop5: p239 start 10 is beyond EOD, truncated [ 227.969460][T16029] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 227.977084][T16029] loop5: p241 start 225 is beyond EOD, truncated [ 227.983434][T16029] loop5: p242 start 10 is beyond EOD, truncated [ 227.989746][T16029] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 227.997524][T16029] loop5: p244 start 225 is beyond EOD, truncated [ 228.003886][T16029] loop5: p245 start 10 is beyond EOD, truncated [ 228.010176][T16029] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 228.017797][T16029] loop5: p247 start 225 is beyond EOD, truncated [ 228.024242][T16029] loop5: p248 start 10 is beyond EOD, truncated [ 228.030509][T16029] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 228.038084][T16029] loop5: p250 start 225 is beyond EOD, truncated [ 228.044434][T16029] loop5: p251 start 10 is beyond EOD, truncated [ 228.050771][T16029] loop5: p252 size 1073872896 extends beyond EOD, truncated [ 228.058379][T16029] loop5: p253 start 225 is beyond EOD, truncated [ 228.064749][T16029] loop5: p254 start 10 is beyond EOD, truncated 23:00:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00') 23:00:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 23:00:22 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_regs}) 23:00:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:22 executing program 5: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516100a000100010423dcffdf00", 0x76) [ 228.070979][T16029] loop5: p255 size 1073872896 extends beyond EOD, truncated 23:00:22 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)=@ethtool_regs}) 23:00:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) [ 228.131638][ T1029] loop5: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 228.135077][ T1029] loop5: p1 start 10 is beyond EOD, truncated [ 228.228219][ T1029] loop5: p2 size 1073872896 extends beyond EOD, truncated 23:00:22 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 23:00:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) removexattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0)=@known='user.syz\x00') [ 228.236946][ T1029] loop5: p3 start 225 is beyond EOD, truncated [ 228.243139][ T1029] loop5: p4 size 2 extends beyond EOD, truncated 23:00:22 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d82ce9c0952d644157684e3dae491de7600a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d315ec9b327320a8f91e7f0d2e9c88f5ac7a0b6f7274692f3cae6770a9b08819ff285047a7bd96821", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 23:00:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x30, &(0x7f0000000140)=ANY=[], 0xa8) 23:00:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x14d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:00:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) [ 228.286250][ T1029] loop5: p5 start 10 is beyond EOD, truncated [ 228.292448][ T1029] loop5: p6 size 1073872896 extends beyond EOD, truncated [ 228.316518][ T1029] loop5: p7 start 225 is beyond EOD, truncated [ 228.322859][ T1029] loop5: p8 start 10 is beyond EOD, truncated [ 228.328917][ T1029] loop5: p9 size 1073872896 extends beyond EOD, truncated 23:00:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 23:00:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x4b, 0x0, &(0x7f00000014c0)) [ 228.377192][ T1029] loop5: p10 start 225 is beyond EOD, truncated [ 228.383497][ T1029] loop5: p11 start 10 is beyond EOD, truncated [ 228.389672][ T1029] loop5: p12 size 1073872896 extends beyond EOD, truncated [ 228.398030][ T1029] loop5: p13 start 225 is beyond EOD, truncated [ 228.404319][ T1029] loop5: p14 start 10 is beyond EOD, truncated [ 228.410476][ T1029] loop5: p15 size 1073872896 extends beyond EOD, truncated [ 228.427692][ T1029] loop5: p16 start 225 is beyond EOD, truncated [ 228.433981][ T1029] loop5: p17 start 10 is beyond EOD, truncated [ 228.440122][ T1029] loop5: p18 size 1073872896 extends beyond EOD, truncated [ 228.447814][ T1029] loop5: p19 start 225 is beyond EOD, truncated [ 228.454095][ T1029] loop5: p20 start 10 is beyond EOD, truncated [ 228.460297][ T1029] loop5: p21 size 1073872896 extends beyond EOD, truncated [ 228.467945][ T1029] loop5: p22 start 225 is beyond EOD, truncated [ 228.474321][ T1029] loop5: p23 start 10 is beyond EOD, truncated [ 228.480464][ T1029] loop5: p24 size 1073872896 extends beyond EOD, truncated [ 228.488038][ T1029] loop5: p25 start 225 is beyond EOD, truncated [ 228.494295][ T1029] loop5: p26 start 10 is beyond EOD, truncated [ 228.500439][ T1029] loop5: p27 size 1073872896 extends beyond EOD, truncated [ 228.507980][ T1029] loop5: p28 start 225 is beyond EOD, truncated [ 228.514297][ T1029] loop5: p29 start 10 is beyond EOD, truncated [ 228.520459][ T1029] loop5: p30 size 1073872896 extends beyond EOD, truncated [ 228.528002][ T1029] loop5: p31 start 225 is beyond EOD, truncated [ 228.534312][ T1029] loop5: p32 start 10 is beyond EOD, truncated [ 228.540453][ T1029] loop5: p33 size 1073872896 extends beyond EOD, truncated [ 228.547993][ T1029] loop5: p34 start 225 is beyond EOD, truncated [ 228.554257][ T1029] loop5: p35 start 10 is beyond EOD, truncated [ 228.560458][ T1029] loop5: p36 size 1073872896 extends beyond EOD, truncated [ 228.568034][ T1029] loop5: p37 start 225 is beyond EOD, truncated [ 228.574297][ T1029] loop5: p38 start 10 is beyond EOD, truncated [ 228.580491][ T1029] loop5: p39 size 1073872896 extends beyond EOD, truncated [ 228.588030][ T1029] loop5: p40 start 225 is beyond EOD, truncated [ 228.594292][ T1029] loop5: p41 start 10 is beyond EOD, truncated [ 228.600431][ T1029] loop5: p42 size 1073872896 extends beyond EOD, truncated [ 228.607991][ T1029] loop5: p43 start 225 is beyond EOD, truncated [ 228.614273][ T1029] loop5: p44 start 10 is beyond EOD, truncated [ 228.620413][ T1029] loop5: p45 size 1073872896 extends beyond EOD, truncated [ 228.628108][ T1029] loop5: p46 start 225 is beyond EOD, truncated [ 228.634542][ T1029] loop5: p47 start 10 is beyond EOD, truncated [ 228.640687][ T1029] loop5: p48 size 1073872896 extends beyond EOD, truncated [ 228.648259][ T1029] loop5: p49 start 225 is beyond EOD, truncated [ 228.654527][ T1029] loop5: p50 start 10 is beyond EOD, truncated [ 228.660763][ T1029] loop5: p51 size 1073872896 extends beyond EOD, truncated [ 228.668367][ T1029] loop5: p52 start 225 is beyond EOD, truncated [ 228.674632][ T1029] loop5: p53 start 10 is beyond EOD, truncated [ 228.680775][ T1029] loop5: p54 size 1073872896 extends beyond EOD, truncated [ 228.688370][ T1029] loop5: p55 start 225 is beyond EOD, truncated [ 228.694640][ T1029] loop5: p56 start 10 is beyond EOD, truncated [ 228.700812][ T1029] loop5: p57 size 1073872896 extends beyond EOD, truncated [ 228.708467][ T1029] loop5: p58 start 225 is beyond EOD, truncated [ 228.714752][ T1029] loop5: p59 start 10 is beyond EOD, truncated [ 228.720924][ T1029] loop5: p60 size 1073872896 extends beyond EOD, truncated [ 228.728487][ T1029] loop5: p61 start 225 is beyond EOD, truncated [ 228.734809][ T1029] loop5: p62 start 10 is beyond EOD, truncated [ 228.740954][ T1029] loop5: p63 size 1073872896 extends beyond EOD, truncated [ 228.748501][ T1029] loop5: p64 start 225 is beyond EOD, truncated [ 228.754845][ T1029] loop5: p65 start 10 is beyond EOD, truncated [ 228.760985][ T1029] loop5: p66 size 1073872896 extends beyond EOD, truncated [ 228.768659][ T1029] loop5: p67 start 225 is beyond EOD, truncated [ 228.775073][ T1029] loop5: p68 start 10 is beyond EOD, truncated [ 228.781304][ T1029] loop5: p69 size 1073872896 extends beyond EOD, truncated [ 228.789007][ T1029] loop5: p70 start 225 is beyond EOD, truncated [ 228.795290][ T1029] loop5: p71 start 10 is beyond EOD, truncated [ 228.801440][ T1029] loop5: p72 size 1073872896 extends beyond EOD, truncated [ 228.808973][ T1029] loop5: p73 start 225 is beyond EOD, truncated [ 228.815247][ T1029] loop5: p74 start 10 is beyond EOD, truncated [ 228.821554][ T1029] loop5: p75 size 1073872896 extends beyond EOD, truncated [ 228.829152][ T1029] loop5: p76 start 225 is beyond EOD, truncated [ 228.835418][ T1029] loop5: p77 start 10 is beyond EOD, truncated [ 228.841729][ T1029] loop5: p78 size 1073872896 extends beyond EOD, truncated [ 228.849275][ T1029] loop5: p79 start 225 is beyond EOD, truncated [ 228.855609][ T1029] loop5: p80 start 10 is beyond EOD, truncated [ 228.861804][ T1029] loop5: p81 size 1073872896 extends beyond EOD, truncated [ 228.869564][ T1029] loop5: p82 start 225 is beyond EOD, truncated [ 228.875823][ T1029] loop5: p83 start 10 is beyond EOD, truncated [ 228.881993][ T1029] loop5: p84 size 1073872896 extends beyond EOD, truncated [ 228.889802][ T1029] loop5: p85 start 225 is beyond EOD, truncated [ 228.896090][ T1029] loop5: p86 start 10 is beyond EOD, truncated [ 228.902297][ T1029] loop5: p87 size 1073872896 extends beyond EOD, truncated [ 228.909959][ T1029] loop5: p88 start 225 is beyond EOD, truncated [ 228.916276][ T1029] loop5: p89 start 10 is beyond EOD, truncated [ 228.922441][ T1029] loop5: p90 size 1073872896 extends beyond EOD, truncated [ 228.929873][ T1029] loop5: p91 start 225 is beyond EOD, truncated [ 228.936255][ T1029] loop5: p92 start 10 is beyond EOD, truncated [ 228.942433][ T1029] loop5: p93 size 1073872896 extends beyond EOD, truncated [ 228.949995][ T1029] loop5: p94 start 225 is beyond EOD, truncated [ 228.956277][ T1029] loop5: p95 start 10 is beyond EOD, truncated [ 228.962447][ T1029] loop5: p96 size 1073872896 extends beyond EOD, truncated [ 228.970017][ T1029] loop5: p97 start 225 is beyond EOD, truncated [ 228.976335][ T1029] loop5: p98 start 10 is beyond EOD, truncated [ 228.982591][ T1029] loop5: p99 size 1073872896 extends beyond EOD, truncated [ 228.990154][ T1029] loop5: p100 start 225 is beyond EOD, truncated [ 228.996510][ T1029] loop5: p101 start 10 is beyond EOD, truncated [ 229.002758][ T1029] loop5: p102 size 1073872896 extends beyond EOD, truncated [ 229.010402][ T1029] loop5: p103 start 225 is beyond EOD, truncated [ 229.016774][ T1029] loop5: p104 start 10 is beyond EOD, truncated [ 229.023051][ T1029] loop5: p105 size 1073872896 extends beyond EOD, truncated [ 229.030760][ T1029] loop5: p106 start 225 is beyond EOD, truncated [ 229.037101][ T1029] loop5: p107 start 10 is beyond EOD, truncated [ 229.043419][ T1029] loop5: p108 size 1073872896 extends beyond EOD, truncated [ 229.051168][ T1029] loop5: p109 start 225 is beyond EOD, truncated [ 229.057534][ T1029] loop5: p110 start 10 is beyond EOD, truncated [ 229.063784][ T1029] loop5: p111 size 1073872896 extends beyond EOD, truncated [ 229.071502][ T1029] loop5: p112 start 225 is beyond EOD, truncated [ 229.078016][ T1029] loop5: p113 start 10 is beyond EOD, truncated [ 229.084265][ T1029] loop5: p114 size 1073872896 extends beyond EOD, truncated [ 229.092213][ T1029] loop5: p115 start 225 is beyond EOD, truncated [ 229.098558][ T1029] loop5: p116 start 10 is beyond EOD, truncated [ 229.104811][ T1029] loop5: p117 size 1073872896 extends beyond EOD, truncated [ 229.112529][ T1029] loop5: p118 start 225 is beyond EOD, truncated [ 229.118918][ T1029] loop5: p119 start 10 is beyond EOD, truncated [ 229.125155][ T1029] loop5: p120 size 1073872896 extends beyond EOD, truncated [ 229.132836][ T1029] loop5: p121 start 225 is beyond EOD, truncated [ 229.139170][ T1029] loop5: p122 start 10 is beyond EOD, truncated [ 229.145441][ T1029] loop5: p123 size 1073872896 extends beyond EOD, truncated [ 229.153129][ T1029] loop5: p124 start 225 is beyond EOD, truncated [ 229.159451][ T1029] loop5: p125 start 10 is beyond EOD, truncated [ 229.165777][ T1029] loop5: p126 size 1073872896 extends beyond EOD, truncated [ 229.173480][ T1029] loop5: p127 start 225 is beyond EOD, truncated [ 229.179805][ T1029] loop5: p128 start 10 is beyond EOD, truncated [ 229.186065][ T1029] loop5: p129 size 1073872896 extends beyond EOD, truncated [ 229.193868][ T1029] loop5: p130 start 225 is beyond EOD, truncated [ 229.200189][ T1029] loop5: p131 start 10 is beyond EOD, truncated [ 229.206443][ T1029] loop5: p132 size 1073872896 extends beyond EOD, truncated [ 229.214045][ T1029] loop5: p133 start 225 is beyond EOD, truncated [ 229.220365][ T1029] loop5: p134 start 10 is beyond EOD, truncated [ 229.226694][ T1029] loop5: p135 size 1073872896 extends beyond EOD, truncated [ 229.234398][ T1029] loop5: p136 start 225 is beyond EOD, truncated [ 229.240743][ T1029] loop5: p137 start 10 is beyond EOD, truncated [ 229.247092][ T1029] loop5: p138 size 1073872896 extends beyond EOD, truncated [ 229.254812][ T1029] loop5: p139 start 225 is beyond EOD, truncated [ 229.261139][ T1029] loop5: p140 start 10 is beyond EOD, truncated [ 229.267383][ T1029] loop5: p141 size 1073872896 extends beyond EOD, truncated [ 229.275119][ T1029] loop5: p142 start 225 is beyond EOD, truncated [ 229.281465][ T1029] loop5: p143 start 10 is beyond EOD, truncated [ 229.287722][ T1029] loop5: p144 size 1073872896 extends beyond EOD, truncated [ 229.295372][ T1029] loop5: p145 start 225 is beyond EOD, truncated [ 229.301718][ T1029] loop5: p146 start 10 is beyond EOD, truncated [ 229.307950][ T1029] loop5: p147 size 1073872896 extends beyond EOD, truncated [ 229.315608][ T1029] loop5: p148 start 225 is beyond EOD, truncated [ 229.321969][ T1029] loop5: p149 start 10 is beyond EOD, truncated [ 229.328201][ T1029] loop5: p150 size 1073872896 extends beyond EOD, truncated [ 229.336088][ T1029] loop5: p151 start 225 is beyond EOD, truncated [ 229.342511][ T1029] loop5: p152 start 10 is beyond EOD, truncated [ 229.348814][ T1029] loop5: p153 size 1073872896 extends beyond EOD, truncated [ 229.356687][ T1029] loop5: p154 start 225 is beyond EOD, truncated [ 229.363047][ T1029] loop5: p155 start 10 is beyond EOD, truncated [ 229.369274][ T1029] loop5: p156 size 1073872896 extends beyond EOD, truncated [ 229.377095][ T1029] loop5: p157 start 225 is beyond EOD, truncated [ 229.383438][ T1029] loop5: p158 start 10 is beyond EOD, truncated [ 229.389688][ T1029] loop5: p159 size 1073872896 extends beyond EOD, truncated [ 229.398232][ T1029] loop5: p160 start 225 is beyond EOD, truncated [ 229.404589][ T1029] loop5: p161 start 10 is beyond EOD, truncated [ 229.410821][ T1029] loop5: p162 size 1073872896 extends beyond EOD, truncated [ 229.418605][ T1029] loop5: p163 start 225 is beyond EOD, truncated [ 229.424979][ T1029] loop5: p164 start 10 is beyond EOD, truncated [ 229.431208][ T1029] loop5: p165 size 1073872896 extends beyond EOD, truncated [ 229.439143][ T1029] loop5: p166 start 225 is beyond EOD, truncated [ 229.445516][ T1029] loop5: p167 start 10 is beyond EOD, truncated [ 229.451845][ T1029] loop5: p168 size 1073872896 extends beyond EOD, truncated [ 229.459623][ T1029] loop5: p169 start 225 is beyond EOD, truncated [ 229.465963][ T1029] loop5: p170 start 10 is beyond EOD, truncated [ 229.472276][ T1029] loop5: p171 size 1073872896 extends beyond EOD, truncated [ 229.479899][ T1029] loop5: p172 start 225 is beyond EOD, truncated [ 229.486404][ T1029] loop5: p173 start 10 is beyond EOD, truncated [ 229.492656][ T1029] loop5: p174 size 1073872896 extends beyond EOD, truncated [ 229.500229][ T1029] loop5: p175 start 225 is beyond EOD, truncated [ 229.506573][ T1029] loop5: p176 start 10 is beyond EOD, truncated [ 229.512846][ T1029] loop5: p177 size 1073872896 extends beyond EOD, truncated [ 229.521702][ T1029] loop5: p178 start 225 is beyond EOD, truncated [ 229.528105][ T1029] loop5: p179 start 10 is beyond EOD, truncated [ 229.534345][ T1029] loop5: p180 size 1073872896 extends beyond EOD, truncated [ 229.542004][ T1029] loop5: p181 start 225 is beyond EOD, truncated [ 229.548406][ T1029] loop5: p182 start 10 is beyond EOD, truncated [ 229.554651][ T1029] loop5: p183 size 1073872896 extends beyond EOD, truncated [ 229.562342][ T1029] loop5: p184 start 225 is beyond EOD, truncated [ 229.568669][ T1029] loop5: p185 start 10 is beyond EOD, truncated [ 229.574928][ T1029] loop5: p186 size 1073872896 extends beyond EOD, truncated [ 229.582658][ T1029] loop5: p187 start 225 is beyond EOD, truncated [ 229.589040][ T1029] loop5: p188 start 10 is beyond EOD, truncated [ 229.595280][ T1029] loop5: p189 size 1073872896 extends beyond EOD, truncated [ 229.603271][ T1029] loop5: p190 start 225 is beyond EOD, truncated [ 229.609596][ T1029] loop5: p191 start 10 is beyond EOD, truncated [ 229.615838][ T1029] loop5: p192 size 1073872896 extends beyond EOD, truncated [ 229.623532][ T1029] loop5: p193 start 225 is beyond EOD, truncated [ 229.629955][ T1029] loop5: p194 start 10 is beyond EOD, truncated [ 229.636197][ T1029] loop5: p195 size 1073872896 extends beyond EOD, truncated [ 229.643844][ T1029] loop5: p196 start 225 is beyond EOD, truncated [ 229.650163][ T1029] loop5: p197 start 10 is beyond EOD, truncated [ 229.656454][ T1029] loop5: p198 size 1073872896 extends beyond EOD, truncated [ 229.664125][ T1029] loop5: p199 start 225 is beyond EOD, truncated [ 229.670456][ T1029] loop5: p200 start 10 is beyond EOD, truncated [ 229.676706][ T1029] loop5: p201 size 1073872896 extends beyond EOD, truncated [ 229.684402][ T1029] loop5: p202 start 225 is beyond EOD, truncated [ 229.690746][ T1029] loop5: p203 start 10 is beyond EOD, truncated [ 229.696996][ T1029] loop5: p204 size 1073872896 extends beyond EOD, truncated [ 229.704674][ T1029] loop5: p205 start 225 is beyond EOD, truncated [ 229.711079][ T1029] loop5: p206 start 10 is beyond EOD, truncated [ 229.717318][ T1029] loop5: p207 size 1073872896 extends beyond EOD, truncated [ 229.725050][ T1029] loop5: p208 start 225 is beyond EOD, truncated [ 229.731414][ T1029] loop5: p209 start 10 is beyond EOD, truncated [ 229.737658][ T1029] loop5: p210 size 1073872896 extends beyond EOD, truncated [ 229.745419][ T1029] loop5: p211 start 225 is beyond EOD, truncated [ 229.751763][ T1029] loop5: p212 start 10 is beyond EOD, truncated [ 229.757991][ T1029] loop5: p213 size 1073872896 extends beyond EOD, truncated [ 229.765638][ T1029] loop5: p214 start 225 is beyond EOD, truncated [ 229.772108][ T1029] loop5: p215 start 10 is beyond EOD, truncated [ 229.778337][ T1029] loop5: p216 size 1073872896 extends beyond EOD, truncated [ 229.786482][ T1029] loop5: p217 start 225 is beyond EOD, truncated [ 229.792834][ T1029] loop5: p218 start 10 is beyond EOD, truncated [ 229.799093][ T1029] loop5: p219 size 1073872896 extends beyond EOD, truncated [ 229.806814][ T1029] loop5: p220 start 225 is beyond EOD, truncated [ 229.813163][ T1029] loop5: p221 start 10 is beyond EOD, truncated [ 229.819421][ T1029] loop5: p222 size 1073872896 extends beyond EOD, truncated [ 229.827146][ T1029] loop5: p223 start 225 is beyond EOD, truncated [ 229.833494][ T1029] loop5: p224 start 10 is beyond EOD, truncated [ 229.839720][ T1029] loop5: p225 size 1073872896 extends beyond EOD, truncated [ 229.847694][ T1029] loop5: p226 start 225 is beyond EOD, truncated [ 229.854050][ T1029] loop5: p227 start 10 is beyond EOD, truncated [ 229.860345][ T1029] loop5: p228 size 1073872896 extends beyond EOD, truncated [ 229.868024][ T1029] loop5: p229 start 225 is beyond EOD, truncated [ 229.874387][ T1029] loop5: p230 start 10 is beyond EOD, truncated [ 229.880643][ T1029] loop5: p231 size 1073872896 extends beyond EOD, truncated [ 229.888472][ T1029] loop5: p232 start 225 is beyond EOD, truncated [ 229.894820][ T1029] loop5: p233 start 10 is beyond EOD, truncated [ 229.901050][ T1029] loop5: p234 size 1073872896 extends beyond EOD, truncated [ 229.908777][ T1029] loop5: p235 start 225 is beyond EOD, truncated [ 229.915123][ T1029] loop5: p236 start 10 is beyond EOD, truncated [ 229.921351][ T1029] loop5: p237 size 1073872896 extends beyond EOD, truncated [ 229.929116][ T1029] loop5: p238 start 225 is beyond EOD, truncated [ 229.935466][ T1029] loop5: p239 start 10 is beyond EOD, truncated [ 229.941807][ T1029] loop5: p240 size 1073872896 extends beyond EOD, truncated [ 229.949493][ T1029] loop5: p241 start 225 is beyond EOD, truncated [ 229.955965][ T1029] loop5: p242 start 10 is beyond EOD, truncated [ 229.962232][ T1029] loop5: p243 size 1073872896 extends beyond EOD, truncated [ 229.969804][ T1029] loop5: p244 start 225 is beyond EOD, truncated [ 229.976196][ T1029] loop5: p245 start 10 is beyond EOD, truncated [ 229.982457][ T1029] loop5: p246 size 1073872896 extends beyond EOD, truncated [ 229.990011][ T1029] loop5: p247 start 225 is beyond EOD, truncated [ 229.996354][ T1029] loop5: p248 start 10 is beyond EOD, truncated [ 230.002608][ T1029] loop5: p249 size 1073872896 extends beyond EOD, truncated [ 230.011096][ T1029] loop5: p250 start 225 is beyond EOD, truncated [ 230.017447][ T1029] loop5: p251 start 10 is beyond EOD, truncated [ 230.023889][ T1029] loop5: p252 size 1073872896 extends beyond EOD, truncated [ 230.031631][ T1029] loop5: p253 start 225 is beyond EOD, truncated [ 230.037960][ T1029] loop5: p254 start 10 is beyond EOD, truncated [ 230.044199][ T1029] loop5: p255 size 1073872896 extends beyond EOD, truncated 23:00:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 23:00:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x4b, 0x0, &(0x7f00000014c0)) 23:00:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) 23:00:24 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d82ce9c0952d644157684e3dae491de7600a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d315ec9b327320a8f91e7f0d2e9c88f5ac7a0b6f7274692f3cae6770a9b08819ff285047a7bd96821", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 23:00:24 executing program 5: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516100a000100010423dcffdf00", 0x76) 23:00:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 23:00:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x4b, 0x0, &(0x7f00000014c0)) 23:00:24 executing program 5: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516100a000100010423dcffdf00", 0x76) 23:00:25 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x14d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:00:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) futex(&(0x7f0000000200), 0x86, 0x0, 0x0, 0x0, 0x0) 23:00:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) 23:00:25 executing program 5: r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) r2 = socket(0x10, 0x3, 0xc) write(r2, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516100a000100010423dcffdf00", 0x76) 23:00:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800004, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x4b, 0x0, &(0x7f00000014c0)) 23:00:25 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:00:25 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x20000000, 0x4) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 23:00:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d82ce9c0952d644157684e3dae491de7600a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d315ec9b327320a8f91e7f0d2e9c88f5ac7a0b6f7274692f3cae6770a9b08819ff285047a7bd96821", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 23:00:27 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xe, 0x4) 23:00:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 23:00:27 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x20000000, 0x4) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 23:00:27 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:00:28 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x14d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:00:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 23:00:28 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e05485b4ff95f715134d82ce9c0952d644157684e3dae491de7600a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d315ec9b327320a8f91e7f0d2e9c88f5ac7a0b6f7274692f3cae6770a9b08819ff285047a7bd96821", 0xbd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x4) 23:00:28 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:00:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x20000000, 0x4) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 23:00:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xe, 0x4) 23:00:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 23:00:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x48, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@private1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) 23:00:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:00:31 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 23:00:31 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:00:31 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xe, 0x4) 23:00:31 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="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", 0x14d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:00:31 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000180)=0x20000000, 0x4) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 23:00:31 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:00:32 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:00:32 executing program 3: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 23:00:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffd, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x21, 0xd9f, 0x0) 23:00:32 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:32 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:34 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:34 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xe, 0x4) 23:00:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) 23:00:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffd, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x21, 0xd9f, 0x0) 23:00:34 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:00:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) 23:00:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:00:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) 23:00:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:00:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) 23:00:35 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 23:00:35 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:35 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='#! ./file0 G'], 0x191) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:00:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffd, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x21, 0xd9f, 0x0) 23:00:35 executing program 0: r0 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL, 0xc) io_uring_enter(r0, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 23:00:35 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[{0x18, 0x1, 0x1, "8172"}], 0x18}}], 0x2, 0x0) 23:00:35 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='#! ./file0 G'], 0x191) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:00:35 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00000002c0)={[0xfffffffffffffff6]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa0000000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000000c0)={0x0, r3+10000000}, &(0x7f0000001780)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) rmdir(&(0x7f0000000100)='./control\x00') 23:00:35 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 23:00:35 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='#! ./file0 G'], 0x191) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:00:35 executing program 0: r0 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL, 0xc) io_uring_enter(r0, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 23:00:35 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 23:00:35 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[{0x18, 0x1, 0x1, "8172"}], 0x18}}], 0x2, 0x0) 23:00:35 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='#! ./file0 G'], 0x191) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 23:00:35 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 23:00:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffffd, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x21, 0xd9f, 0x0) 23:00:36 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[{0x18, 0x1, 0x1, "8172"}], 0x18}}], 0x2, 0x0) 23:00:36 executing program 0: r0 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL, 0xc) io_uring_enter(r0, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 23:00:36 executing program 1: r0 = socket(0x10, 0x80000000000802, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000b00a84302911000ed3900050035000c00060000001900150004000000000000dc1338d5440f3b3f2b76dac4167b30d53bbd8df800009b84136ef75a0184de441100", 0x55}], 0x1}, 0x0) 23:00:36 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="92", 0x1}], 0x80000, &(0x7f0000000240)) 23:00:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:36 executing program 5: rt_sigaction(0x2c, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 23:00:36 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000084c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[{0x18, 0x1, 0x1, "8172"}], 0x18}}], 0x2, 0x0) 23:00:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:36 executing program 0: r0 = syz_io_uring_setup(0x282, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_ASYNC_CANCEL, 0xc) io_uring_enter(r0, 0x1a8a, 0x0, 0x0, 0x0, 0x0) 23:00:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:36 executing program 5: rt_sigaction(0x2c, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 23:00:37 executing program 5: rt_sigaction(0x2c, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 23:00:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:37 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a9", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x2) 23:00:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 23:00:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:37 executing program 5: rt_sigaction(0x2c, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 23:00:37 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffff801, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 23:00:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 23:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x24}}, 0x0) [ 243.100945][T16807] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 23:00:37 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a9", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x2) 23:00:37 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 23:00:37 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=5,mode=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) [ 243.220623][T16841] loop4: detected capacity change from 0 to 264192 23:00:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x24}}, 0x0) 23:00:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 23:00:37 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=5,mode=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 23:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x24}}, 0x0) [ 243.261949][T16841] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:37 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=5,mode=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 23:00:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) [ 243.658955][ T22] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:40 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a9", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x2) 23:00:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x24}}, 0x0) 23:00:40 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=5,mode=0']) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000000280)) 23:00:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:40 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:40 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000280)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 23:00:40 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 23:00:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004980)={@mcast2, 0x0, r2}) 23:00:40 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x6, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) [ 246.235866][T16895] loop4: detected capacity change from 0 to 264192 [ 246.263052][T16895] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:40 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 246.326731][T16919] loop3: detected capacity change from 0 to 264192 [ 246.335759][T16919] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 246.662279][ T22] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 246.671591][ T22] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:43 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a9", 0x7c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x2) 23:00:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004980)={@mcast2, 0x0, r2}) 23:00:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x6, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) 23:00:43 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 23:00:43 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:43 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:43 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 249.253095][T16948] loop4: detected capacity change from 0 to 264192 [ 249.259824][T16946] loop3: detected capacity change from 0 to 264192 [ 249.270883][T16948] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 249.271198][T16946] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x6, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) 23:00:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004980)={@mcast2, 0x0, r2}) 23:00:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004980)={@mcast2, 0x0, r2}) 23:00:43 executing program 5: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 23:00:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x6, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0) [ 249.675869][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 249.713225][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:46 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f0000002d00), 0x0, &(0x7f0000002e00)) 23:00:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000140)) 23:00:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 23:00:46 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) statfs(0x0, 0x0) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x8000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) 23:00:46 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 252.272383][T16993] loop4: detected capacity change from 0 to 264192 [ 252.281904][T16993] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 252.295707][T16995] loop3: detected capacity change from 0 to 264192 [ 252.316505][T16995] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 23:00:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000140)) [ 252.349258][T17005] FAT-fs (loop5): bogus number of reserved sectors [ 252.355801][T17005] FAT-fs (loop5): Can't find a valid FAT filesystem 23:00:46 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 23:00:46 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000140)) [ 252.403854][T17005] FAT-fs (loop5): bogus number of reserved sectors [ 252.410439][T17005] FAT-fs (loop5): Can't find a valid FAT filesystem 23:00:47 executing program 5: unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 23:00:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 23:00:47 executing program 5: unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 23:00:47 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc05c5340, &(0x7f0000000140)) 23:00:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 23:00:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) chdir(0x0) symlink(&(0x7f0000000140)='..', &(0x7f0000000040)='./file0\x00') pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00') 23:00:47 executing program 3: getresgid(&(0x7f0000000080), 0x0, 0x0) 23:00:47 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x7fff}}, {@noacl}]}) 23:00:47 executing program 5: unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 23:00:47 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {0x0, 0x0, 0xfffffffe}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff94ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffab2888d050d6b86e50bfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0xa49c2, 0x0) getdents64(r0, &(0x7f0000000280)=""/66, 0x42) [ 252.782098][ T22] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 252.791479][ T8] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 23:00:47 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 23:00:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x400b012, r1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b582f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) 23:00:47 executing program 1: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c000000180007041dfffd946f610529802000001f10000500000800", 0x1c}], 0x1}, 0x0) 23:00:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541c, &(0x7f0000000000)=""/206) 23:00:47 executing program 2: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 23:00:47 executing program 5: unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) 23:00:47 executing program 1: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c000000180007041dfffd946f610529802000001f10000500000800", 0x1c}], 0x1}, 0x0) [ 252.967856][T17060] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 252.967856][T17060] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 252.967856][T17060] 23:00:47 executing program 2: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 23:00:47 executing program 5: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) [ 253.034951][T17060] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000007fff,noacl,,errors=continue. Quota mode: none. [ 253.082217][T17089] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 253.082217][T17089] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.082217][T17089] 23:00:47 executing program 1: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c000000180007041dfffd946f610529802000001f10000500000800", 0x1c}], 0x1}, 0x0) 23:00:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541c, &(0x7f0000000000)=""/206) 23:00:47 executing program 2: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 23:00:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x400b012, r1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b582f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) 23:00:47 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x7fff}}, {@noacl}]}) 23:00:47 executing program 5: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) [ 253.130342][T17089] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000007fff,noacl,,errors=continue. Quota mode: none. 23:00:47 executing program 1: r0 = socket$inet(0x10, 0x400000002, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1c000000180007041dfffd946f610529802000001f10000500000800", 0x1c}], 0x1}, 0x0) 23:00:47 executing program 2: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) 23:00:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541c, &(0x7f0000000000)=""/206) 23:00:47 executing program 5: unshare(0x2c020000) set_mempolicy(0x1, &(0x7f0000000000)=0x7, 0x69) semget$private(0x0, 0x403, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) [ 253.196862][T17109] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 253.196862][T17109] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.196862][T17109] 23:00:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = io_uring_setup(0x3eb9, &(0x7f0000000140)={0x0, 0xae31}) ioctl$FICLONE(r1, 0x40049409, r2) 23:00:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) 23:00:47 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x7fff}}, {@noacl}]}) [ 253.280859][T17109] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000007fff,noacl,,errors=continue. Quota mode: none. 23:00:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541c, &(0x7f0000000000)=""/206) [ 253.374154][T17140] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 253.374154][T17140] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.374154][T17140] [ 253.393580][T17140] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000007fff,noacl,,errors=continue. Quota mode: none. 23:00:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x400b012, r1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b582f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) 23:00:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = io_uring_setup(0x3eb9, &(0x7f0000000140)={0x0, 0xae31}) ioctl$FICLONE(r1, 0x40049409, r2) 23:00:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) 23:00:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:47 executing program 4: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x884a0, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x7fff}}, {@noacl}]}) 23:00:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) 23:00:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = io_uring_setup(0x3eb9, &(0x7f0000000140)={0x0, 0xae31}) ioctl$FICLONE(r1, 0x40049409, r2) 23:00:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000001400)=""/4100, 0x1004}], 0x1) 23:00:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 253.541241][T17166] EXT4-fs (sda1): Mount option "noacl" will be removed by 3.5 [ 253.541241][T17166] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 253.541241][T17166] 23:00:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x400b012, r1, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff009b66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b582f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3146", 0xff7c}], 0x1) 23:00:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x42, 0xa01}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 23:00:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = io_uring_setup(0x3eb9, &(0x7f0000000140)={0x0, 0xae31}) ioctl$FICLONE(r1, 0x40049409, r2) 23:00:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:00:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 23:00:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff}) [ 253.637296][T17166] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000007fff,noacl,,errors=continue. Quota mode: none. 23:00:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x400000000803, 0x5f) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x6, 0x0, @fd=r3}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xfffffffffffffc22, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:00:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 23:00:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff}) 23:00:48 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_link_settings={0x21}}) 23:00:48 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:00:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x400000000803, 0x5f) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x6, 0x0, @fd=r3}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xfffffffffffffc22, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:00:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x400000000803, 0x5f) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x6, 0x0, @fd=r3}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xfffffffffffffc22, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:00:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff}) 23:00:48 executing program 2: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)) 23:00:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 23:00:48 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:48 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 23:00:48 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x400000000803, 0x5f) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x6, 0x0, @fd=r3}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0xfffffffffffffc22, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:00:48 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff}) 23:00:48 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:48 executing program 2: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)) 23:00:51 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:00:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:51 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 23:00:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1072, 0x40}, [{}]}, 0x78) 23:00:51 executing program 2: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)) 23:00:51 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:51 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:51 executing program 2: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)) [ 256.835701][ T25] audit: type=1326 audit(1619478051.355:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 23:00:51 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 23:00:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1072, 0x40}, [{}]}, 0x78) 23:00:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:51 executing program 0: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x4) [ 256.908747][ T25] audit: type=1326 audit(1619478051.385:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=230 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 256.968271][ T25] audit: type=1326 audit(1619478051.395:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.003904][ T25] audit: type=1326 audit(1619478051.395:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.029391][ T25] audit: type=1326 audit(1619478051.395:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.053360][ T25] audit: type=1326 audit(1619478051.395:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.077477][ T25] audit: type=1326 audit(1619478051.395:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17266 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.101447][ T25] audit: type=1326 audit(1619478051.485:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17287 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.125444][ T25] audit: type=1326 audit(1619478051.485:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17287 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=230 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 257.149529][ T25] audit: type=1326 audit(1619478051.515:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=17287 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 23:00:54 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094", 0x8}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 23:00:54 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1072, 0x40}, [{}]}, 0x78) 23:00:54 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 23:00:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x4) 23:00:54 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x0, 0x0) 23:00:54 executing program 0: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x4) 23:00:54 executing program 4: prctl$PR_MCE_KILL(0x23, 0x4, 0x550000) 23:00:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000a80)={{0x1b, 0x5b, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1072, 0x40}, [{}]}, 0x78) 23:00:54 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 23:00:54 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:54 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:57 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:57 executing program 0: r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, 0xffffffffffffffff, 0x4) 23:00:57 executing program 4: prctl$PR_MCE_KILL(0x23, 0x4, 0x550000) 23:00:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1}, {@in=@multicast1, 0x0, 0x33}, @in6=@remote}}, [@mark={0xc}]}, 0x104}}, 0x0) 23:00:57 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000000c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000000300)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000480)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:00:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1}, {@in=@multicast1, 0x0, 0x33}, @in6=@remote}}, [@mark={0xc}]}, 0x104}}, 0x0) 23:00:57 executing program 4: prctl$PR_MCE_KILL(0x23, 0x4, 0x550000) 23:00:57 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:57 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) memfd_create(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 23:00:57 executing program 0: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCGETS2(r0, 0x5416, 0x0) 23:00:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1}, {@in=@multicast1, 0x0, 0x33}, @in6=@remote}}, [@mark={0xc}]}, 0x104}}, 0x0) 23:00:57 executing program 4: prctl$PR_MCE_KILL(0x23, 0x4, 0x550000) 23:00:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1}, {@in=@multicast1, 0x0, 0x33}, @in6=@remote}}, [@mark={0xc}]}, 0x104}}, 0x0) [ 262.959499][T17353] loop3: detected capacity change from 0 to 4096 [ 262.998459][T17353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:00:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000090) 23:00:57 executing program 0: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCGETS2(r0, 0x5416, 0x0) 23:00:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000018000000000000000000a"], 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:00:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:00:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 23:00:57 executing program 0: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCGETS2(r0, 0x5416, 0x0) 23:00:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000090) 23:00:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:00:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:00:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 23:00:57 executing program 0: unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCGETS2(r0, 0x5416, 0x0) 23:00:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000090) 23:00:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:00:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000018000000000000000000a"], 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:57 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 23:00:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:00:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000a00)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x82) write$9p(r0, &(0x7f0000001400)=';', 0x1) truncate(&(0x7f0000000540)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) futimesat(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendfile(r0, r1, 0x0, 0x10000) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 23:00:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000090) 23:00:57 executing program 5: r0 = socket$inet6(0xa, 0x2000000080803, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23:00:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') close_range(r0, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:00:58 executing program 5: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:58 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000080)) 23:00:58 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)="af", 0x1}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x8011, r0, 0x0) syz_io_uring_setup(0x1502, &(0x7f0000000440), &(0x7f00000f7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 23:00:58 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:58 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b04", 0x66, 0x400}], 0x0, &(0x7f0000000140)) [ 263.565103][T17464] loop5: detected capacity change from 0 to 1020 [ 263.597348][T17478] loop4: detected capacity change from 0 to 4 [ 263.598673][T17464] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.615843][T17464] EXT4-fs error (device loop5): ext4_empty_dir:2873: inode #12: comm syz-executor.5: invalid size [ 263.627116][T17478] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 263.631309][T17464] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 23:00:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000018000000000000000000a"], 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 23:00:58 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:58 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)="af", 0x1}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x8011, r0, 0x0) syz_io_uring_setup(0x1502, &(0x7f0000000440), &(0x7f00000f7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 23:00:58 executing program 5: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:58 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b04", 0x66, 0x400}], 0x0, &(0x7f0000000140)) 23:00:58 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) [ 263.807605][T17505] loop4: detected capacity change from 0 to 4 [ 263.836087][T17505] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. 23:00:58 executing program 3: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:58 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)="af", 0x1}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x8011, r0, 0x0) syz_io_uring_setup(0x1502, &(0x7f0000000440), &(0x7f00000f7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) [ 263.862213][T17506] loop5: detected capacity change from 0 to 1020 23:00:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 23:00:58 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b04", 0x66, 0x400}], 0x0, &(0x7f0000000140)) [ 263.904269][T17506] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.916214][T17506] EXT4-fs error (device loop5): ext4_empty_dir:2873: inode #12: comm syz-executor.5: invalid size [ 263.929729][T17506] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 264.003521][T17539] loop4: detected capacity change from 0 to 4 [ 264.029408][T17539] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. 23:00:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000018000000000000000000a"], 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 23:00:59 executing program 3: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:59 executing program 5: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:59 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x4, 0x1, 0x0, r1, &(0x7f0000000180)="af", 0x1}]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800001, 0x8011, r0, 0x0) syz_io_uring_setup(0x1502, &(0x7f0000000440), &(0x7f00000f7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 23:00:59 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="2000000040000000030000002d0000000f0000000000000002000000020000000080000000800000200000002bc4645f2bc4645f0100ffff53ef0100010000002bc4645f000000000000000001000000000000000b0000000001000038000000c20200006b04", 0x66, 0x400}], 0x0, &(0x7f0000000140)) 23:00:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 264.585763][T17563] loop4: detected capacity change from 0 to 4 [ 264.594096][T17560] loop5: detected capacity change from 0 to 1020 [ 264.605010][T17563] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 264.610096][T17559] loop3: detected capacity change from 0 to 1020 [ 264.624438][T17560] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:00:59 executing program 5: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="0201eeffffff0a000000ff45ac0080ffffff0500e931190000000000000680000000630000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:59 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) 23:00:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) [ 264.646864][T17560] EXT4-fs error (device loop5): ext4_empty_dir:2873: inode #12: comm syz-executor.5: invalid size [ 264.657740][T17560] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 264.685939][T17559] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.770768][T17595] new mount options do not match the existing superblock, will be ignored [ 264.770954][T17593] loop2: detected capacity change from 0 to 1 [ 264.789088][T17595] new mount options do not match the existing superblock, will be ignored [ 264.817285][T17600] loop5: detected capacity change from 0 to 1020 [ 264.857686][T17600] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.873692][T17600] EXT4-fs error (device loop5): ext4_empty_dir:2873: inode #12: comm syz-executor.5: invalid size [ 264.885014][T17600] EXT4-fs error (device loop5): ext4_free_inode:351: comm syz-executor.5: bit already cleared for inode 12 [ 264.898525][T17593] loop2: detected capacity change from 0 to 1 23:00:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="0201eeffffff0a000000ff45ac0080ffffff0500e931190000000000000680000000630000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 23:00:59 executing program 3: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:59 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000000)=@ethtool_modinfo={0x7}}) 23:00:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff}) 23:00:59 executing program 1: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 23:00:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff}) 23:00:59 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000000)=@ethtool_modinfo={0x7}}) 23:00:59 executing program 1: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 23:00:59 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000000)=@ethtool_modinfo={0x7}}) [ 265.056123][T17628] loop2: detected capacity change from 0 to 1 [ 265.084909][T17631] new mount options do not match the existing superblock, will be ignored 23:00:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 23:00:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff}) [ 265.115339][T17633] loop3: detected capacity change from 0 to 1020 [ 265.137671][T17633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:00:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="0201eeffffff0a000000ff45ac0080ffffff0500e931190000000000000680000000630000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:59 executing program 1: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 265.167211][T17633] EXT4-fs error (device loop3): ext4_empty_dir:2873: inode #12: comm syz-executor.3: invalid size 23:00:59 executing program 3: fork() ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mprotect(&(0x7f00008a6000/0x4000)=nil, 0x4000, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed417f00000000000000645f29c4645f29c4645f00000500000002", 0x1b, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 23:00:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff}) 23:00:59 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00', &(0x7f0000000000)=@ethtool_modinfo={0x7}}) 23:00:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 23:00:59 executing program 1: r0 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 265.213205][T17663] new mount options do not match the existing superblock, will be ignored [ 265.230170][T17633] EXT4-fs error (device loop3): ext4_free_inode:351: comm syz-executor.3: bit already cleared for inode 12 [ 265.242376][T17667] loop2: detected capacity change from 0 to 1 23:00:59 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="0201eeffffff0a000000ff45ac0080ffffff0500e931190000000000000680000000630000000900000087771f72003007000500000000000000008000ca55aa", 0x40, 0x1c0}]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:00:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {}, 0xa, {0x2, 0x0, @empty}, 'sit0\x00'}) 23:00:59 executing program 0: r0 = socket(0xa, 0x3, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f000000e080)={0x0, 0x0, &(0x7f000000e040)={0x0}}, 0xf0ff7f) 23:00:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 265.298263][T17679] new mount options do not match the existing superblock, will be ignored 23:00:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) 23:00:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:00:59 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {}, 0xa, {0x2, 0x0, @empty}, 'sit0\x00'}) [ 265.406807][T17695] loop2: detected capacity change from 0 to 1 [ 265.419246][T17694] loop3: detected capacity change from 0 to 1020 [ 265.453336][T17694] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 23:01:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {}, 0xa, {0x2, 0x0, @empty}, 'sit0\x00'}) 23:01:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x0, 0x8) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 23:01:00 executing program 2: io_setup(0x85, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x2}]) 23:01:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:01:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:00 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x0, @multicast2}, {}, 0xa, {0x2, 0x0, @empty}, 'sit0\x00'}) 23:01:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:01:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x0, 0x8) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 23:01:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000040)) ptrace(0x10, r1) ptrace(0x11, r1) 23:01:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:01:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:00 executing program 2: io_setup(0x85, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x2}]) 23:01:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b75839f0715a567dafe306f0818fd861ff11495d58553d8c11c606e13da9b8d26a566833fe1f9c73899301d879b51848164e7b988889c753ba801e880c49a91e7b9486916ea7a348947d85d038e1ac9522c", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='M', 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x0, 0x8) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 23:01:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x38, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x10}]}, 0x38}}, 0x0) 23:01:00 executing program 2: io_setup(0x85, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x2}]) 23:01:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x0, 0x8) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) [ 265.930983][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.975886][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:00 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00002b2000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x5000)=nil, 0x7000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 23:01:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000040)) ptrace(0x10, r1) ptrace(0x11, r1) 23:01:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x38, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x10}]}, 0x38}}, 0x0) 23:01:01 executing program 2: io_setup(0x85, &(0x7f0000000200)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r0, 0x2, &(0x7f00000000c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x2}]) 23:01:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:01 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00002b2000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x5000)=nil, 0x7000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 23:01:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:01 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00002b2000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x5000)=nil, 0x7000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) [ 266.682153][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x38, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x10}]}, 0x38}}, 0x0) 23:01:01 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00002b2000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x5000)=nil, 0x7000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) 23:01:01 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:01:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 23:01:01 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 266.791474][T17847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000040)) ptrace(0x10, r1) ptrace(0x11, r1) 23:01:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x38, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x10}]}, 0x38}}, 0x0) 23:01:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 23:01:02 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:01:02 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:01:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/28, 0x4}], 0x1) ioctl$RTC_PIE_ON(r1, 0x7005) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 23:01:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0xfffffffffffffffd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x54}}, 0x0) 23:01:02 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:01:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) [ 267.557018][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:02 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 23:01:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 23:01:02 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x6000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 267.638890][T17890] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:02 executing program 4: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) 23:01:02 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) 23:01:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000040)) ptrace(0x10, r1) ptrace(0x11, r1) 23:01:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0xfffffffffffffffd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x54}}, 0x0) 23:01:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) 23:01:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:03 executing program 4: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) 23:01:03 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 268.443311][ T1316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1316 comm=kworker/1:3 [ 268.459152][T17915] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.468286][ T1316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1316 comm=kworker/1:3 23:01:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0xfffffffffffffffd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x54}}, 0x0) 23:01:03 executing program 4: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) 23:01:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) [ 268.550766][ T1316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1316 comm=kworker/1:3 [ 268.576764][T17938] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) execve(0x0, 0x0, 0x0) 23:01:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:03 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:03 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x54, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0xfffffffffffffffd, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}]}, 0x54}}, 0x0) 23:01:03 executing program 4: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) 23:01:03 executing program 5: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) 23:01:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:03 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000003c0)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:03 executing program 5: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) [ 269.334226][T17959] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.348173][ T7080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=7080 comm=kworker/0:4 23:01:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 23:01:04 executing program 2: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f00009b3000)) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) 23:01:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:04 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lremovexattr(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000101) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 23:01:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:04 executing program 5: r0 = memfd_create(&(0x7f0000000240)='b\xc08\xcf\x9f &4\x8bd\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r0, 0x0, 0x0, 0x800401) ftruncate(r0, 0x200000) [ 269.463604][ T1316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1316 comm=kworker/1:3 23:01:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 23:01:04 executing program 2: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f00009b3000)) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) 23:01:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 23:01:04 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x28020000) 23:01:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 23:01:04 executing program 2: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f00009b3000)) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) 23:01:04 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x28020000) 23:01:04 executing program 2: setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005}) mlock(&(0x7f0000009000/0x3000)=nil, 0x3000) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f00009b3000)) munlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000008000/0x3000)=nil, 0x3000) 23:01:05 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lremovexattr(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000101) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 23:01:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x21, 0x0) 23:01:05 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 23:01:05 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x28020000) 23:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setuid(0xee01) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x8, 0x0, 0x0) 23:01:05 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = gettid() tkill(r1, 0x34) 23:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setuid(0xee01) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x8, 0x0, 0x0) 23:01:05 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = dup3(r1, r2, 0x0) setns(r3, 0x28020000) 23:01:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x21, 0x0) 23:01:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setuid(0xee01) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x8, 0x0, 0x0) 23:01:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x21, 0x0) 23:01:06 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lremovexattr(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000101) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 23:01:06 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time_for_children\x00') fsetxattr$security_selinux(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setuid(0xee01) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x8, 0x0, 0x0) 23:01:06 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = gettid() tkill(r1, 0x34) 23:01:06 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000380)=""/190, 0xbe}], 0x1, 0x21, 0x0) 23:01:06 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = gettid() tkill(r1, 0x34) 23:01:06 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time_for_children\x00') fsetxattr$security_selinux(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:06 executing program 2: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:06 executing program 3: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:06 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) r1 = gettid() tkill(r1, 0x34) 23:01:06 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:07 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lremovexattr(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x10000101) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='./bus\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) 23:01:07 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time_for_children\x00') fsetxattr$security_selinux(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:07 executing program 2: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:07 executing program 3: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:07 executing program 4: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:07 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time_for_children\x00') fsetxattr$security_selinux(r0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:07 executing program 2: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:07 executing program 3: socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) close(r0) 23:01:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='map=normal,map=off,block=0x0000000000000200,utf8']) 23:01:08 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x3fd, 0x8) r0 = socket$inet(0x2, 0x3, 0x1f) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 23:01:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:08 executing program 1: mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='nfs4\x00', 0x0, 0x0) 23:01:08 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x3fd, 0x8) r0 = socket$inet(0x2, 0x3, 0x1f) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 23:01:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) [ 273.802467][T18179] ISOFS: Unable to identify CD-ROM format. 23:01:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 1: mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='nfs4\x00', 0x0, 0x0) [ 273.850935][T18179] ISOFS: Unable to identify CD-ROM format. 23:01:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0, 0x20, 0x4, 0x10000}, {0x5, 0x6, 0xe7, 0x4}, {0x0, 0x3f, 0x2, 0x9}, {0x4, 0x44, 0x7, 0x9}, {0x1, 0x0, 0x7}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0xc716, 0x0, "aebb6488c5cd58d2800c781d4814c103d03449"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x3) 23:01:08 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x3fd, 0x8) r0 = socket$inet(0x2, 0x3, 0x1f) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) 23:01:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='map=normal,map=off,block=0x0000000000000200,utf8']) 23:01:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 1: mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='nfs4\x00', 0x0, 0x0) 23:01:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 3: set_mempolicy(0x2, &(0x7f0000000000)=0x3fd, 0x8) r0 = socket$inet(0x2, 0x3, 0x1f) setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x0) [ 273.958169][T18218] ISOFS: Unable to identify CD-ROM format. 23:01:08 executing program 1: mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='nfs4\x00', 0x0, 0x0) 23:01:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='map=normal,map=off,block=0x0000000000000200,utf8']) 23:01:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 274.124604][T18252] ISOFS: Unable to identify CD-ROM format. 23:01:08 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='map=normal,map=off,block=0x0000000000000200,utf8']) 23:01:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) 23:01:08 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read(r1, &(0x7f0000000140)=""/188, 0xbc) 23:01:08 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) dup3(r0, r2, 0x0) [ 274.291225][T18286] ISOFS: Unable to identify CD-ROM format. 23:01:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:08 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read(r1, &(0x7f0000000140)=""/188, 0xbc) 23:01:08 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:08 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read(r1, &(0x7f0000000140)=""/188, 0xbc) 23:01:08 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:09 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read(r1, &(0x7f0000000140)=""/188, 0xbc) 23:01:09 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 23:01:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xea4, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000041000/0x2000)=nil, &(0x7f0000042000/0x7000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x58ff346b9ab41012, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 23:01:09 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, &(0x7f00000002c0)) 23:01:09 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 23:01:09 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 23:01:09 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x79, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f710e7d5b925c099710cb6422ec536070ff7ae78886cb6508e094cf05f7512668917458e9f9694c0585fe8411e858d5f2eb3b53dd3d8f71b1cdfcc5b2af289981079bb6fc3ec9499e3c7d0720446f2e2bebaf9e44e717d90ebadaa689a7a2535e4b983142740cb09"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:01:09 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240300005a90f57f07706def9e169c129b3800d6f634f941b46b7bd5e0bbee07962c22772e11e4000000000000000000", 0x34}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000080)) 23:01:09 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = geteuid() r1 = geteuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) setresuid(r0, r0, r1) 23:01:09 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 23:01:09 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) mlock2(&(0x7f0000f6b000/0x3000)=nil, 0x3000, 0x0) 23:01:09 executing program 1: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:01:09 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = geteuid() r1 = geteuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) setresuid(r0, r0, r1) 23:01:09 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) mlock2(&(0x7f0000f6b000/0x3000)=nil, 0x3000, 0x0) 23:01:09 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = geteuid() r1 = geteuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) setresuid(r0, r0, r1) 23:01:09 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) mlock2(&(0x7f0000f6b000/0x3000)=nil, 0x3000, 0x0) 23:01:09 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240300005a90f57f07706def9e169c129b3800d6f634f941b46b7bd5e0bbee07962c22772e11e4000000000000000000", 0x34}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000080)) 23:01:10 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:10 executing program 0: setresuid(0xee00, 0xee00, 0x0) r0 = geteuid() r1 = geteuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) setresuid(r0, r0, r1) 23:01:10 executing program 5: set_mempolicy(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) mlock2(&(0x7f0000f6b000/0x3000)=nil, 0x3000, 0x0) 23:01:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240300005a90f57f07706def9e169c129b3800d6f634f941b46b7bd5e0bbee07962c22772e11e4000000000000000000", 0x34}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000080)) 23:01:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:10 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7ff, 0xff) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x2000000, 0x0, 0x3}, 0x20) 23:01:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="ae88bff8240300005a90f57f07706def9e169c129b3800d6f634f941b46b7bd5e0bbee07962c22772e11e4000000000000000000", 0x34}], 0x1) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000080)) 23:01:10 executing program 5: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='{,[^\xe1.(\x00', 0x0, r0) 23:01:10 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7ff, 0xff) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x2000000, 0x0, 0x3}, 0x20) 23:01:10 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:11 executing program 5: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='{,[^\xe1.(\x00', 0x0, r0) 23:01:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:11 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7ff, 0xff) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x2000000, 0x0, 0x3}, 0x20) 23:01:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:11 executing program 5: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='{,[^\xe1.(\x00', 0x0, r0) 23:01:11 executing program 0: set_mempolicy(0x3, &(0x7f0000000040)=0x7ff, 0xff) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2, 0x2000000, 0x0, 0x3}, 0x20) 23:01:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:11 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 23:01:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:12 executing program 3: r0 = syz_io_uring_setup(0x6c2e, &(0x7f0000000680), &(0x7f0000000000/0x11000)=nil, &(0x7f000036b000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000040)) io_uring_enter(r0, 0x5781, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0) 23:01:12 executing program 5: r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='{,[^\xe1.(\x00', 0x0, r0) 23:01:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) write$P9_RREADDIR(r0, &(0x7f0000000540)={0xb}, 0xb) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 23:01:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) 23:01:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07723fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) 23:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@local}, {@in=@dev, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 23:01:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x40001, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x18}) 23:01:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000006790f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704030000200000ed00002000000000000040000000000008000000", 0x200000bf}], 0x2) 23:01:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:12 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38333031383839323800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000187916524213481db3505d4e06406e21010000000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d0f4655fd0f4655fd0f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000d0f4655fd2f4655fd2f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) 23:01:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07723fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) 23:01:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) write$P9_RREADDIR(r0, &(0x7f0000000540)={0xb}, 0xb) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 23:01:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000006790f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704030000200000ed00002000000000000040000000000008000000", 0x200000bf}], 0x2) 23:01:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) write$P9_RREADDIR(r0, &(0x7f0000000540)={0xb}, 0xb) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 23:01:12 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) 23:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@local}, {@in=@dev, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 23:01:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000006790f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704030000200000ed00002000000000000040000000000008000000", 0x200000bf}], 0x2) 23:01:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07723fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) 23:01:12 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)) 23:01:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000006790f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff7704030000200000ed00002000000000000040000000000008000000", 0x200000bf}], 0x2) 23:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@local}, {@in=@dev, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 23:01:12 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7bcb9edbcc9d1dd33846e70f2444fc768f92a8f07723fb63fc6fa9b081ddd072bc035b568311aa58e58b081556c31beeeff913acf3793d936e4610838efb2f636d66a8"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000000000000000090010000000001000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "80000002c76060e500"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) 23:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@local}, {@in=@dev, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 23:01:12 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) write$P9_RREADDIR(r0, &(0x7f0000000540)={0xb}, 0xb) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 23:01:12 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)) 23:01:12 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000050, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f00000003c0)={0x1}) unshare(0x40600) write$P9_RREADDIR(r0, &(0x7f0000000540)={0xb}, 0xb) write$binfmt_script(r0, 0x0, 0x0) r1 = gettid() fchmod(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 23:01:12 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)) 23:01:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7cdc, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r4, 0x5437, 0x0) 23:01:12 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)) 23:01:12 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xa0000011}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000040)) 23:01:12 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r4, 0x5437, 0x0) 23:01:13 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r4, 0x5437, 0x0) 23:01:13 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:01:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000004f80)={0xa, 0x4e20, 0x0, @loopback}, 0x18) 23:01:13 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x22) socket$packet(0x2, 0x5, 0x106) [ 278.775722][ T25] kauditd_printk_skb: 9 callbacks suppressed [ 278.775734][ T25] audit: type=1400 audit(1619478073.297:106): avc: denied { create } for pid=18750 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_map_t:s0 tclass=tcp_socket permissive=1 23:01:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x7cdc, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) readv(r0, &(0x7f0000002700)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF(r4, 0x5437, 0x0) 23:01:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000004f80)={0xa, 0x4e20, 0x0, @loopback}, 0x18) 23:01:13 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x22) socket$packet(0x2, 0x5, 0x106) 23:01:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000004f80)={0xa, 0x4e20, 0x0, @loopback}, 0x18) [ 278.835522][T18780] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:13 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x2000000) 23:01:13 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x22) socket$packet(0x2, 0x5, 0x106) [ 278.928717][T18803] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:14 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:01:14 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 279.667796][T18830] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.677415][T18831] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 23:01:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec093e307b2d3bdea18093e66ab152db8d83d23366ee6824d69ec8c64f4501da2b6ad7a512abe", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:01:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)) 23:01:16 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x2000000) 23:01:16 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000002080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:01:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 281.782627][T18841] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 281.818163][T18841] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 23:01:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)) 23:01:16 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 23:01:16 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x2000000) 23:01:16 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f30501000800017f16c6d23d371779", 0x10001) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 281.828745][T18858] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.835729][T18857] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 23:01:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)) [ 281.901221][T18869] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 23:01:16 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x85, 0x0, 0x0, &(0x7f0000048000), 0x2000000) [ 281.959464][T18880] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.961608][T18883] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.002822][T18884] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 23:01:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec093e307b2d3bdea18093e66ab152db8d83d23366ee6824d69ec8c64f4501da2b6ad7a512abe", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:01:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) close(r0) 23:01:19 executing program 4: unshare(0x28020400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) 23:01:19 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)) 23:01:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) unshare(0x400) ioctl$TIOCSCTTY(r0, 0x541d, 0x0) 23:01:19 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000002080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) close(r0) 23:01:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) unshare(0x400) ioctl$TIOCSCTTY(r0, 0x541d, 0x0) 23:01:19 executing program 4: unshare(0x400) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 23:01:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) close(r0) 23:01:19 executing program 4: unshare(0x400) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 23:01:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) unshare(0x400) ioctl$TIOCSCTTY(r0, 0x541d, 0x0) [ 284.844951][T18912] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 23:01:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec093e307b2d3bdea18093e66ab152db8d83d23366ee6824d69ec8c64f4501da2b6ad7a512abe", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 23:01:22 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8) close(r0) 23:01:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) unshare(0x400) ioctl$TIOCSCTTY(r0, 0x541d, 0x0) 23:01:22 executing program 4: unshare(0x400) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 23:01:22 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000002080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 23:01:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000202000/0x1000)=nil) 23:01:22 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18b, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:01:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000202000/0x1000)=nil) 23:01:22 executing program 4: unshare(0x400) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 23:01:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) 23:01:22 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000202000/0x1000)=nil) 23:01:22 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000001240)='<', 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x8}]}, 0x18}}, 0x0) 23:01:25 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18b, &(0x7f0000000180)="c4c691019919da078a0098d1f5a593b040f7629c932f55e219f45635d3972ae46c91000000000085ab492afb96692122e117db3d43493210ad887847e34f62bafec24e4631adf9ac059538a640609551a7e00480a96039384a0ad0404b298ec6ca6f10c3fa9765f5370154de578a5254c49c8df29319c0199d9e013b58baff070000676ac4445af4dd7868121b4d73ebe7e33baea48eca7aedbdacc34635800f1eecacf6e9c2682ab42597d8062c6bd0a397d1c70ba966694de0238d90320aa87409df6c7bee14f2acfff45deddaecdc76ed6dcf2fc18a478d1d7da80a004d2f9f9bc07e8e2a977d41c2d725b3d33914e0dc36dab7fd0e517368c45c2b8ce41b6683e4f84d6059ff8826e7241266310c57654a153656e645f3625fd85a094d1252f0ab8c6b4dcc1a97a2619c1124c563725e09ca65e44a15c7396e7a8c94bdbe5f9f40dca5048c1f07a742347ee9e1db5b5284e7a8e69af73ef5da90d2dec316d2a6c6102eb9193e7dc6ca98577ae8f8f1d5304c30a165e3984780474f326cb5d209adb445d11b9b2a5a85"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:01:25 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000202000/0x1000)=nil) 23:01:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) 23:01:25 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000001240)='<', 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:25 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04", 0x1}], 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1f}) 23:01:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) 23:01:25 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18b, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:01:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:01:25 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04", 0x1}], 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1f}) 23:01:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x8}]}, 0x18}}, 0x0) 23:01:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xbcba3526408cfb77) 23:01:25 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000001240)='<', 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:25 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x18b, &(0x7f0000000180)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:01:25 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04", 0x1}], 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1f}) 23:01:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:01:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x8}]}, 0x18}}, 0x0) 23:01:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x8}]}, 0x18}}, 0x0) 23:01:25 executing program 0: syz_mount_image$msdos(&(0x7f00000001c0), 0x0, 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04", 0x1}], 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x1f}) 23:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe7d0f04c95b282fa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) ptrace$setopts(0xffffffffffffffff, 0x0, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x191) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 23:01:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:01:25 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000001240)='<', 0x1) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)={0x18, 0x14, 0x11, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 23:01:25 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x0, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 23:01:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 23:01:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe7d0f04c95b282fa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) ptrace$setopts(0xffffffffffffffff, 0x0, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x191) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 23:01:25 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x0, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 23:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)={0x18, 0x14, 0x11, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 23:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe7d0f04c95b282fa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) ptrace$setopts(0xffffffffffffffff, 0x0, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x191) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 23:01:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)={0x18, 0x14, 0x11, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 23:01:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xe7d0f04c95b282fa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) ptrace$setopts(0xffffffffffffffff, 0x0, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x191) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 23:01:25 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x0, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 23:01:25 executing program 1: setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {0x2, 0x0, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 23:01:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000000100)={0x18, 0x14, 0x11, 0x0, 0x0, {0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) 23:01:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b52, &(0x7f00000002c0)) 23:01:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:26 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000600)="66530700ae897094e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ba5dcf4c2e1fea4b7a3dfc8ea6a7efef7990d00d51feaa24440d21e48dd9e0", 0x5f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:01:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b52, &(0x7f00000002c0)) 23:01:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b52, &(0x7f00000002c0)) 23:01:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/61, 0x3d}], 0x1, 0x2144, 0x0) 23:01:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b52, &(0x7f00000002c0)) 23:01:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x100000, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000100)=@filename='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x201000, 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0xa) 23:01:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000140)) 23:01:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:01:27 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_io_uring_setup(0x1e28, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x4042, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:01:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}, @nested={0x4, 0x3}]}, 0x1c}}, 0x0) 23:01:27 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_io_uring_setup(0x1e28, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x4042, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:01:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}, @nested={0x4, 0x3}]}, 0x1c}}, 0x0) 23:01:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}, @nested={0x4, 0x3}]}, 0x1c}}, 0x0) 23:01:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x4}, @nested={0x4, 0x3}]}, 0x1c}}, 0x0) 23:01:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:27 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_io_uring_setup(0x1e28, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x4042, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:01:27 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x34, 0x1, 0x0, 0x0, 0x0) 23:01:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:28 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x34, 0x1, 0x0, 0x0, 0x0) 23:01:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:01:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000140)) 23:01:28 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0xfffffffffffffffc}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_io_uring_setup(0x1e28, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ff3000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x4042, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:01:28 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x34, 0x1, 0x0, 0x0, 0x0) 23:01:28 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x34, 0x1, 0x0, 0x0, 0x0) 23:01:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x890d, 0x0) 23:01:28 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x541b, &(0x7f0000000040)) 23:01:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) lseek(0xffffffffffffffff, 0xffffffffffffffe, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000038c0)={0x3, 'veth0_to_team\x00', {0xfc}}) 23:01:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x890d, 0x0) 23:01:28 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x541b, &(0x7f0000000040)) 23:01:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000140)) 23:01:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x890d, 0x0) 23:01:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:01:29 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x541b, &(0x7f0000000040)) 23:01:29 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:01:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x890d, 0x0) 23:01:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) 23:01:29 executing program 1: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x541b, &(0x7f0000000040)) 23:01:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000140)) 23:01:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private0, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) 23:01:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) 23:01:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 23:01:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) 23:01:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private0, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) 23:01:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$binfmt_aout(r0, 0x0, 0xc) 23:01:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private0, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) 23:01:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$binfmt_aout(r0, 0x0, 0xc) 23:01:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) 23:01:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 23:01:30 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) [ 295.945971][ T25] audit: type=1326 audit(1619478090.478:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 295.972380][ T25] audit: type=1326 audit(1619478090.478:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 295.997207][ T25] audit: type=1326 audit(1619478090.478:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=304 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 296.021357][ T25] audit: type=1326 audit(1619478090.478:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 296.045388][ T25] audit: type=1326 audit(1619478090.478:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=157 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 296.069484][ T25] audit: type=1326 audit(1619478090.498:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19367 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 23:01:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 23:01:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$binfmt_aout(r0, 0x0, 0xc) 23:01:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private0, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) 23:01:31 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xbc\xb3g\x9f\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\x17\xd4|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc23\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "f935dd58f7c5772b"}, 0xc) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') 23:01:31 executing program 0: r0 = syz_io_uring_setup(0x533, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x159d, 0x0, 0x0, 0x0, 0x0) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 23:01:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 23:01:31 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xbc\xb3g\x9f\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\x17\xd4|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc23\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "f935dd58f7c5772b"}, 0xc) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') [ 296.721703][ T25] audit: type=1326 audit(1619478091.248:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19374 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 [ 296.747418][ T25] audit: type=1326 audit(1619478091.248:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19374 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=304 compat=0 ip=0x4665f9 code=0x7ffc0000 23:01:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') write$binfmt_aout(r0, 0x0, 0xc) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 23:01:31 executing program 0: r0 = syz_io_uring_setup(0x533, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x159d, 0x0, 0x0, 0x0, 0x0) 23:01:31 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 23:01:31 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 23:01:31 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xbc\xb3g\x9f\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\x17\xd4|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc23\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "f935dd58f7c5772b"}, 0xc) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') 23:01:31 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 0: r0 = syz_io_uring_setup(0x533, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x159d, 0x0, 0x0, 0x0, 0x0) [ 296.862370][ T25] audit: type=1326 audit(1619478091.248:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19374 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 23:01:31 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 23:01:31 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) 23:01:31 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xbc\xb3g\x9f\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\x17\xd4|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc23\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "f935dd58f7c5772b"}, 0xc) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000005, 0x11, r0, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') 23:01:31 executing program 0: r0 = syz_io_uring_setup(0x533, &(0x7f0000000580), &(0x7f0000ffa000/0x3000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x159d, 0x0, 0x0, 0x0, 0x0) 23:01:31 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) [ 296.976565][ T25] audit: type=1326 audit(1619478091.348:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=19391 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7ffc0000 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) 23:01:31 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 23:01:31 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) 23:01:31 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:01:31 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x30}, 0x0) 23:01:31 executing program 3: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) 23:01:31 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:01:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x203}]}, 0x10) 23:01:31 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xffffffffffffffff, r0) r1 = getuid() setreuid(r1, 0x0) 23:01:31 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:01:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000440)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x30}, 0x0) 23:01:31 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000480)) 23:01:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x203}]}, 0x10) 23:01:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1102) 23:01:31 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xfa0f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:01:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000440)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:01:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x30}, 0x0) 23:01:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x203}]}, 0x10) 23:01:31 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/229, 0xe5, 0x2) 23:01:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000440)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:01:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1102) 23:01:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x30}, 0x0) 23:01:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094f328e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ce5dcf4c2a1fea4b7a3dfc8ea6a7e1d4ed6c1e43227522efef7990d00d51feaa244420000000d9e05485b4ff95f715134d82ce9c0952d6441576840684a30ad5b9b69bc2476c7494eb20c74450b7c16929f5b72e9f7806328368587814d4039985fa6e53904d6e4db8a75fd241b126d7b2b7e0620c8b98ed3c3886a8c1a46f33054022652c285d047d99c80f2f6cb914fc6147ea8d35df7150cab5b9c013e44a56780ae648f0f21b3d597d0842946af9", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:01:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x64, 0x0, 0x0, 0x203}]}, 0x10) 23:01:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1102) 23:01:32 executing program 2: r0 = socket(0x11, 0x80803, 0x0) unshare(0x600) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8901, &(0x7f00000000c0)) 23:01:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x10b, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0fb4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f60958691a8a3fcf561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df6591cd574a02d4d9b9f3ebce31bd7582018ded8ceb71e75417dabc45f9fa0503befdcd0874ae979bc9581d6a854d4dfb7ffaed09bfcf330c365988c05e12ed069a42c964f79e16ad22f9"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x34) 23:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x30}}, 0x0) [ 297.496258][T19528] new mount options do not match the existing superblock, will be ignored [ 297.533156][T19528] new mount options do not match the existing superblock, will be ignored 23:01:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/229, 0xe5, 0x2) 23:01:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1102) 23:01:32 executing program 2: r0 = socket(0x11, 0x80803, 0x0) unshare(0x600) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8901, &(0x7f00000000c0)) 23:01:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094f328e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ce5dcf4c2a1fea4b7a3dfc8ea6a7e1d4ed6c1e43227522efef7990d00d51feaa244420000000d9e05485b4ff95f715134d82ce9c0952d6441576840684a30ad5b9b69bc2476c7494eb20c74450b7c16929f5b72e9f7806328368587814d4039985fa6e53904d6e4db8a75fd241b126d7b2b7e0620c8b98ed3c3886a8c1a46f33054022652c285d047d99c80f2f6cb914fc6147ea8d35df7150cab5b9c013e44a56780ae648f0f21b3d597d0842946af9", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:01:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3020000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000580)={[{@inode_readahead_blks}, {@bh}]}) 23:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x30}}, 0x0) 23:01:32 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x402c04, 0x0, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x4) mremap(&(0x7f0000373000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000dde000/0x3000)=nil) [ 297.662177][T19565] new mount options do not match the existing superblock, will be ignored [ 297.692536][T19576] loop3: detected capacity change from 0 to 98560 23:01:32 executing program 2: r0 = socket(0x11, 0x80803, 0x0) unshare(0x600) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8901, &(0x7f00000000c0)) [ 297.714760][T19576] EXT4-fs (loop3): Ignoring removed bh option [ 297.739326][T19576] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,bh,,errors=continue. Quota mode: none. 23:01:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/229, 0xe5, 0x2) 23:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x30}}, 0x0) [ 297.754168][T19576] ext4 filesystem being mounted at /root/syzkaller-testdir950898148/syzkaller.r3OsZ7/584/file0 supports timestamps until 2038 (0x7fffffff) 23:01:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3020000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000580)={[{@inode_readahead_blks}, {@bh}]}) 23:01:32 executing program 2: r0 = socket(0x11, 0x80803, 0x0) unshare(0x600) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8901, &(0x7f00000000c0)) 23:01:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}]}, 0x30}}, 0x0) 23:01:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/229, 0xe5, 0x2) 23:01:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="39000000130003475fae7cdac52541300600000001000000450000002500000019001a00120002000200000000000006040000000000000000", 0x39}], 0x1) [ 297.836518][T19596] new mount options do not match the existing superblock, will be ignored [ 297.905701][T19609] loop3: detected capacity change from 0 to 98560 [ 297.931698][T19609] EXT4-fs (loop3): Ignoring removed bh option [ 297.938604][T19613] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.953221][T19614] new mount options do not match the existing superblock, will be ignored [ 297.955830][T19613] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.971748][T19609] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,bh,,errors=continue. Quota mode: none. [ 297.986399][T19609] ext4 filesystem being mounted at /root/syzkaller-testdir950898148/syzkaller.r3OsZ7/585/file0 supports timestamps until 2038 (0x7fffffff) 23:01:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094f328e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ce5dcf4c2a1fea4b7a3dfc8ea6a7e1d4ed6c1e43227522efef7990d00d51feaa244420000000d9e05485b4ff95f715134d82ce9c0952d6441576840684a30ad5b9b69bc2476c7494eb20c74450b7c16929f5b72e9f7806328368587814d4039985fa6e53904d6e4db8a75fd241b126d7b2b7e0620c8b98ed3c3886a8c1a46f33054022652c285d047d99c80f2f6cb914fc6147ea8d35df7150cab5b9c013e44a56780ae648f0f21b3d597d0842946af9", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:01:35 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:01:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="39000000130003475fae7cdac52541300600000001000000450000002500000019001a00120002000200000000000006040000000000000000", 0x39}], 0x1) 23:01:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3020000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000580)={[{@inode_readahead_blks}, {@bh}]}) 23:01:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100002000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:01:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100002000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 300.702504][T19632] loop3: detected capacity change from 0 to 98560 [ 300.716206][T19632] EXT4-fs (loop3): Ignoring removed bh option [ 300.727806][T19632] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,bh,,errors=continue. Quota mode: none. [ 300.733068][T19644] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 23:01:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3020000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d90000000f0000000100000000000000000000000020000000200000200000002cc4645f2cc4645f0100ffff53ef0100010000002cc4645f000000000000000001000000000000000b0000008000000038000000c20200006b0400000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3338363633343038350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000d9ca5cac99fd4329af4dde786c1a5d13010040000c000000000000002cc4645f", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a040000001400000024000000d9000f000300040000000000210d5cf20f00e6ef00000000000000000000000000000000000000000000000065789ee9", 0x5c, 0x7e0}, {&(0x7f0000011e00)="00000000000000000000000000000000000000000000000000000000520b0000ed410000000400002cc4645f2cc4645f2cc4645f00000000000004000200000000000800050000000af3010004000000000000000000000001000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008669", 0x9e, 0x9060}], 0x0, &(0x7f0000000580)={[{@inode_readahead_blks}, {@bh}]}) 23:01:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 300.742823][T19632] ext4 filesystem being mounted at /root/syzkaller-testdir950898148/syzkaller.r3OsZ7/586/file0 supports timestamps until 2038 (0x7fffffff) [ 300.751458][T19644] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 23:01:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100002000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="39000000130003475fae7cdac52541300600000001000000450000002500000019001a00120002000200000000000006040000000000000000", 0x39}], 0x1) 23:01:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 300.865480][T19664] loop3: detected capacity change from 0 to 98560 [ 300.876980][T19670] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.886364][T19670] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.898251][T19664] EXT4-fs (loop3): Ignoring removed bh option [ 300.927061][T19664] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,bh,,errors=continue. Quota mode: none. [ 300.942512][T19664] ext4 filesystem being mounted at /root/syzkaller-testdir950898148/syzkaller.r3OsZ7/587/file0 supports timestamps until 2038 (0x7fffffff) 23:01:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() poll(0x0, 0x0, 0xfffffffffffffff8) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="66530700ae897094f328e7b126b097eaa769be6d05c41bd36ab95156e9962f38ee9611b9774e677d114b65c44f7b7d9ce423c22f45958dc387a323aa893a8cf41753ce5dcf4c2a1fea4b7a3dfc8ea6a7e1d4ed6c1e43227522efef7990d00d51feaa244420000000d9e05485b4ff95f715134d82ce9c0952d6441576840684a30ad5b9b69bc2476c7494eb20c74450b7c16929f5b72e9f7806328368587814d4039985fa6e53904d6e4db8a75fd241b126d7b2b7e0620c8b98ed3c3886a8c1a46f33054022652c285d047d99c80f2f6cb914fc6147ea8d35df7150cab5b9c013e44a56780ae648f0f21b3d597d0842946af9", 0xf2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 23:01:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b", 0xa}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x5) tkill(r1, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="100002000000"], 0x7c, 0x0) ptrace$cont(0x18, r1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:01:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="39000000130003475fae7cdac52541300600000001000000450000002500000019001a00120002000200000000000006040000000000000000", 0x39}], 0x1) 23:01:38 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:01:38 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000300)) 23:01:38 executing program 0: r0 = socket(0x2, 0x3, 0x8) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xc, 0xffffffffffffffff, [{0x2, 0x6, "f36eb3a3"}]}]}}}], 0x20}}], 0x1, 0x0) 23:01:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x1000) 23:01:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updsa={0x120, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x2b}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 23:01:38 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001280)="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", 0xff}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) [ 303.696261][T19692] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.705612][T19692] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. 23:01:38 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updsa={0x120, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x2b}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 23:01:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updsa={0x120, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x2b}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 23:01:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 23:01:41 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:01:41 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:41 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updsa={0x120, 0x1a, 0x1, 0x0, 0x0, {{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x2b}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}, @replay_esn_val={0x1c}]}, 0x120}}, 0x0) 23:01:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 23:01:41 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001280)="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", 0xff}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) 23:01:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 23:01:41 executing program 5: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 23:01:41 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:01:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xfdc4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 23:01:41 executing program 5: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 23:01:41 executing program 5: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 23:01:41 executing program 3: r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x6000) 23:01:41 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:41 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:41 executing program 5: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) 23:01:41 executing program 3: r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x6000) 23:01:44 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001280)="82bb7102cc6560ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4b79ce63a7560f2950035254b654ed339b07ebcf3b498fccba20bcae2b6f577b36b79f72f77ef0d450a8f25ea6cd09c60b49bac43836221bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e000000c39d2a91b66bc753aadf96cf6414ed57532ca1fde37c99e49e33be31297f90a37e1f09f95a0e336667fd27ea", 0xff}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) 23:01:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000000, 0x81) write$char_usb(r0, &(0x7f0000000000)="ae00", 0x2) 23:01:44 executing program 3: r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x6000) 23:01:44 executing program 5: r0 = getpgid(0x0) process_vm_writev(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/169, 0xa9}], 0x1, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/150, 0x96}], 0x1, 0x0) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:01:44 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:44 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40505330, &(0x7f0000000180)={0x86000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x80045301, 0x0) tkill(r0, 0x7) 23:01:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000000, 0x81) write$char_usb(r0, &(0x7f0000000000)="ae00", 0x2) 23:01:44 executing program 3: r0 = getpgrp(0x0) ioprio_set$pid(0x2, r0, 0x6000) 23:01:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000000, 0x81) write$char_usb(r0, &(0x7f0000000000)="ae00", 0x2) 23:01:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:01:44 executing program 3: syz_io_uring_setup(0x6227, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000007a40)) syz_io_uring_setup(0x3721, &(0x7f0000000680), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740)) 23:01:44 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000000, 0x81) write$char_usb(r0, &(0x7f0000000000)="ae00", 0x2) 23:01:47 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001280)="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", 0xff}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x2) 23:01:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f00000002c0)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f", 0x2c, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) r2 = fcntl$dupfd(r1, 0x0, r1) openat(r2, &(0x7f0000000040)='./file0\x00', 0xa2b40, 0x1c4) getdents(r2, &(0x7f0000000340)=""/235, 0xeb) 23:01:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:01:47 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x9) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0105303, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000003c0)) tkill(r1, 0x7) 23:01:47 executing program 4: r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 23:01:47 executing program 0: clock_settime(0x0, &(0x7f0000000180)={0xfffffffffffffff7}) 23:01:47 executing program 0: clock_settime(0x0, &(0x7f0000000180)={0xfffffffffffffff7}) 23:01:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:01:47 executing program 0: clock_settime(0x0, &(0x7f0000000180)={0xfffffffffffffff7}) 23:01:47 executing program 4: r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 23:01:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:01:50 executing program 4: r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 23:01:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 0: clock_settime(0x0, &(0x7f0000000180)={0xfffffffffffffff7}) 23:01:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x9) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0105303, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000003c0)) tkill(r1, 0x7) 23:01:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd123b6a5426180a8c200000000000000000000000000002000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x0, 0x0, 0x7}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:01:50 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 23:01:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 4: r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 23:01:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd123b6a5426180a8c200000000000000000000000000002000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x0, 0x0, 0x7}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:01:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000000d}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 23:01:50 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 23:01:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae897094e7b126b097eaa769bc6d05c41bd34e677d114b7691d8b125fa654b7d0000000000007209ec1aebcb67f9e613b0eedcc53ee19ed6ae74a3af432786ee1cbf4d80d39f5ccefc5a7c34877a3854f4ccd7b0dfa6430a4a0ad4ee0ae91ceb80ab2f45562fdbb25fc66a9de0792ec3d2f3dd8a4771611043902bfa61a1a05fb05099a66bc22faccdda85f01ec1871c81d4208c44108c995ff1a0dd6f0d410d1737ebd339c654d018605cddabb9ad5154465ac5d0863d9c3620af7cc51e6cbb8f87c66099789109ad382afa1634df6800e9a65d9fbb5557bb28ca331e1765af5551148a9569070531d102927b4d377b212ae362576a052283e7746b159415f2c3605a1da450b5406316c916eb83d70089968c6114df07ebf3346318c4ec4ad853fc639e754dcb", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="c3", 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd123b6a5426180a8c200000000000000000000000000002000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x0, 0x0, 0x7}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:01:50 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x9) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0105303, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000003c0)) tkill(r1, 0x7) 23:01:50 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:01:50 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000240)) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file2\x00', 0x0) openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 23:01:50 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 23:01:50 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd123b6a5426180a8c200000000000000000000000000002000"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x0, 0x0, 0x7}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 23:01:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="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", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="c3", 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:50 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:01:50 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 23:01:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="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", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="c3", 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:50 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0fb1f147a8378f364602812c66538d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x2) 23:01:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x105082) fallocate(r1, 0x11, 0x0, 0x100007e00) 23:01:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="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", 0x12b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="c3", 0x1}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:01:50 executing program 3: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x9) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/232, 0xe8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc0105303, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000003c0)) tkill(r1, 0x7) 23:01:50 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:01:50 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x200) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x7fffffff, 0x20) sendfile(r0, r1, 0x0, 0x10000) 23:01:50 executing program 2: r0 = eventfd(0x1ffe00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 23:01:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:50 executing program 2: r0 = eventfd(0x1ffe00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 23:01:50 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:01:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:53 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0fb1f147a8378f364602812c66538d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x2) 23:01:53 executing program 2: r0 = eventfd(0x1ffe00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 23:01:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:53 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706", 0x200) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x7fffffff, 0x20) sendfile(r0, r1, 0x0, 0x10000) 23:01:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x120, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 23:01:53 executing program 2: r0 = eventfd(0x1ffe00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 23:01:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x120, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 23:01:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:53 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:53 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:53 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x120, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) [ 319.330384][T20144] loop4: detected capacity change from 0 to 4168 [ 319.358334][T20144] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 319.373582][T20144] EXT4-fs error (device loop4): ext4_readdir:243: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir189881331/syzkaller.LU43af/583/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 23:01:56 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0fb1f147a8378f364602812c66538d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x2) 23:01:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x120, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd891fa870d434223169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36000000007baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0132044681400bf30024514a6d2675bab926125c43083e773eb3d8dea74700066ee70c42196645292c0e4c3622c102a16be9066fc27e7d4466cbb295eb7f286dcccfde0740cb90366fdd064888fc176574bd977c8c7ef316262a70e75001b11c7c49ae8797518e425ef9080c77c164ad240e88feb024ff8cdd59ea301679ac9655e0bbfa3cd7f00729e4572f401"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = gettid() tkill(r3, 0x40) 23:01:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) bind$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 23:01:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:56 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x200) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x7fffffff, 0x20) sendfile(r0, r1, 0x0, 0x10000) 23:01:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 322.264785][T20172] loop4: detected capacity change from 0 to 4168 [ 322.287406][T20172] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:01:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:56 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 322.308027][T20172] EXT4-fs error (device loop4): ext4_readdir:243: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir189881331/syzkaller.LU43af/584/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 23:01:56 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:56 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 322.411521][T20195] loop5: detected capacity change from 0 to 4168 [ 322.437064][T20195] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.445145][T20205] loop4: detected capacity change from 0 to 4168 [ 322.463220][T20205] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.485126][T20195] EXT4-fs error (device loop5): ext4_readdir:243: inode #2: block 16: comm syz-executor.5: path /root/syzkaller-testdir033418338/syzkaller.LZD4a1/611/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 [ 322.511280][T20205] EXT4-fs error (device loop4): ext4_readdir:243: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir189881331/syzkaller.LU43af/585/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 23:01:59 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0fb1f147a8378f364602812c66538d", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x2) 23:01:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:59 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 23:01:59 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:59 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) 23:01:59 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x200) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000180)=0x7fffffff, 0x20) sendfile(r0, r1, 0x0, 0x10000) 23:01:59 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000d, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{}, 0x0, 0x0, @unused, @subvolid}) perf_event_open(&(0x7f000025c000)={0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 325.310954][T20232] loop4: detected capacity change from 0 to 4168 [ 325.326400][T20236] loop5: detected capacity change from 0 to 4168 23:01:59 executing program 3: clone3(&(0x7f0000000440)={0x40104200, 0x0, 0x0, 0x0, {}, &(0x7f00000002c0)=""/179, 0xb3, 0x0, 0x0}, 0x58) [ 325.352381][T20232] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.364567][T20236] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:02:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbb, &(0x7f0000000280)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0db4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f609561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 23:02:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x5d, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff66020225112136d565726716c290e3e6bbcefce76f392b730cf12d7f3e4faeb9dfefe8445fdceac3bbfa5de714945"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) [ 325.384348][T20236] EXT4-fs error (device loop5): ext4_readdir:243: inode #2: block 16: comm syz-executor.5: path /root/syzkaller-testdir033418338/syzkaller.LZD4a1/612/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 [ 325.391459][T20232] EXT4-fs error (device loop4): ext4_readdir:243: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir189881331/syzkaller.LU43af/586/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 23:02:00 executing program 3: clone3(&(0x7f0000000440)={0x40104200, 0x0, 0x0, 0x0, {}, &(0x7f00000002c0)=""/179, 0xb3, 0x0, 0x0}, 0x58) 23:02:00 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000180)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4400}, {0x0, 0x0, 0x4000000000004880}], 0x0, &(0x7f0000014a00)=ANY=[]) getdents(r0, &(0x7f0000000340)=""/138, 0x8a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/216, 0xd8) getdents64(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000) [ 325.577490][T20293] loop5: detected capacity change from 0 to 4168 [ 325.611696][T20293] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.625491][T20293] EXT4-fs error (device loop5): ext4_readdir:243: inode #2: block 16: comm syz-executor.5: path /root/syzkaller-testdir033418338/syzkaller.LZD4a1/613/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=4096 23:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x58, {0x2, 0x0, @multicast1}, 'macvlan1\x00'}) 23:02:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x5d, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff66020225112136d565726716c290e3e6bbcefce76f392b730cf12d7f3e4faeb9dfefe8445fdceac3bbfa5de714945"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbb, &(0x7f0000000280)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0db4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f609561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 23:02:02 executing program 3: clone3(&(0x7f0000000440)={0x40104200, 0x0, 0x0, 0x0, {}, &(0x7f00000002c0)=""/179, 0xb3, 0x0, 0x0}, 0x58) 23:02:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl(r1, 0x80009374, &(0x7f00000002c0)) 23:02:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xc04a01) 23:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x58, {0x2, 0x0, @multicast1}, 'macvlan1\x00'}) 23:02:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbb, &(0x7f0000000280)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0db4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f609561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 23:02:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x5d, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff66020225112136d565726716c290e3e6bbcefce76f392b730cf12d7f3e4faeb9dfefe8445fdceac3bbfa5de714945"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:02 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl(r1, 0x80009374, &(0x7f00000002c0)) 23:02:02 executing program 3: clone3(&(0x7f0000000440)={0x40104200, 0x0, 0x0, 0x0, {}, &(0x7f00000002c0)=""/179, 0xb3, 0x0, 0x0}, 0x58) 23:02:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x58, {0x2, 0x0, @multicast1}, 'macvlan1\x00'}) 23:02:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xc04a01) 23:02:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000e, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x5d, &(0x7f0000000180)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff66020225112136d565726716c290e3e6bbcefce76f392b730cf12d7f3e4faeb9dfefe8445fdceac3bbfa5de714945"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xbb, &(0x7f0000000280)="c4c691019919da078a0098d1e0a593b040f7629100f06ee04fa4ea57ff22ea97be19af3dcba01419cd2386ad59157689c9c6a47312334c2a97ac2b7f0db4aabebae8dc5dffbcd48a70502173d6efa56b60f48cf0c9d0989ecbbfc220bd2b39df9ad8d6b14910f4a869863009780dd6e673a02f7ed829932929af9dffb1fa2cd7328202ac55f4f5dbb8494120f79d5f609561c33f46ab89803f47d97e04f7bf9cafb006ae29480408c8380cf060dd72462ccc5b7d195a113bc539df"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x34) 23:02:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x58, {0x2, 0x0, @multicast1}, 'macvlan1\x00'}) 23:02:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@delsa={0x48, 0x11, 0x123, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, [@mark={0xc}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}}, 0x0) 23:02:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl(r1, 0x80009374, &(0x7f00000002c0)) 23:02:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xc04a01) 23:02:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unshare(0x40000000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) 23:02:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x13c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:03 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0x8f0}) 23:02:03 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl(r1, 0x80009374, &(0x7f00000002c0)) 23:02:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@delsa={0x48, 0x11, 0x123, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, [@mark={0xc}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}}, 0x0) 23:02:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xc04a01) 23:02:03 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f4070009040002000000010000000000000008", 0x1d) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xac95, 0x0) 23:02:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@delsa={0x48, 0x11, 0x123, 0x0, 0x0, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, [@mark={0xc}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x48}}, 0x0) 23:02:03 executing program 3: clock_adjtime(0x0, &(0x7f0000000000)={0x8f0}) 23:02:03 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r4, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f4070009040002000000010000000000000008", 0x1d) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xac95, 0x0) 23:02:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 23:02:04 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x1, 0x0, [0x5, 0x6, 0xffff, 0xff], [0x7, 0x7fffffff, 0xfffffffffffffffe, 0x7, 0x55, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8001, 0xffff, 0x9, 0x2, 0x2, 0x1000, 0x39, 0x0, 0x3d3, 0x800, 0x10001, 0x401, 0x2, 0x1000, 0x6, 0x9, 0x2, 0x2000000000000, 0x5, 0x7f, 0x3f, 0x1, 0x9, 0x2, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x1, 0xfffffffffffff800, 0x0, 0x5, 0x8, 0x1, 0x400, 0x7fffffff, 0x7, 0x401, 0x1ff, 0x1, 0x6, 0xfff, 0xc6, 0x6, 0x10001, 0x9, 0x0, 0x8, 0x4, 0xe7d5, 0x280, 0x4, 0x67, 0xd5, 0xffffffffffffff95, 0xcf, 0x6, 0x7ff, 0xfffffffffffffe01, 0x3d24, 0x1, 0x1, 0x8, 0x5, 0x3, 0xffffffff00000000, 0xfff, 0xfffffffffffffffa, 0x4, 0x8, 0x2, 0x6, 0x20, 0x80000001, 0x2, 0x0, 0x1, 0x7, 0x3, 0x50, 0x7, 0xff, 0x95, 0xffff, 0x1000, 0x79, 0x0, 0x8, 0x7, 0x8, 0x0, 0x200, 0x10001, 0x1, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x3ff, 0x86, 0x7, 0x401, 0x0, 0x7]}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 23:02:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x45, 0x2}, @rumble}) write$evdev(r0, &(0x7f0000000040), 0x373) 23:02:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x00', 0x0) fallocate(r0, 0x3, 0x7fff, 0x1) 23:02:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x00', 0x0) fallocate(r0, 0x3, 0x7fff, 0x1) 23:02:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 23:02:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x45, 0x2}, @rumble}) write$evdev(r0, &(0x7f0000000040), 0x373) [ 329.674975][T20474] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 329.683216][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init() ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 23:02:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x45, 0x2}, @rumble}) write$evdev(r0, &(0x7f0000000040), 0x373) 23:02:04 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x00', 0x0) fallocate(r0, 0x3, 0x7fff, 0x1) [ 329.756614][T20491] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 329.764851][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x40) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) 23:02:05 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f4070009040002000000010000000000000008", 0x1d) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xac95, 0x0) 23:02:05 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x1, 0x0, [0x5, 0x6, 0xffff, 0xff], [0x7, 0x7fffffff, 0xfffffffffffffffe, 0x7, 0x55, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8001, 0xffff, 0x9, 0x2, 0x2, 0x1000, 0x39, 0x0, 0x3d3, 0x800, 0x10001, 0x401, 0x2, 0x1000, 0x6, 0x9, 0x2, 0x2000000000000, 0x5, 0x7f, 0x3f, 0x1, 0x9, 0x2, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x1, 0xfffffffffffff800, 0x0, 0x5, 0x8, 0x1, 0x400, 0x7fffffff, 0x7, 0x401, 0x1ff, 0x1, 0x6, 0xfff, 0xc6, 0x6, 0x10001, 0x9, 0x0, 0x8, 0x4, 0xe7d5, 0x280, 0x4, 0x67, 0xd5, 0xffffffffffffff95, 0xcf, 0x6, 0x7ff, 0xfffffffffffffe01, 0x3d24, 0x1, 0x1, 0x8, 0x5, 0x3, 0xffffffff00000000, 0xfff, 0xfffffffffffffffa, 0x4, 0x8, 0x2, 0x6, 0x20, 0x80000001, 0x2, 0x0, 0x1, 0x7, 0x3, 0x50, 0x7, 0xff, 0x95, 0xffff, 0x1000, 0x79, 0x0, 0x8, 0x7, 0x8, 0x0, 0x200, 0x10001, 0x1, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x3ff, 0x86, 0x7, 0x401, 0x0, 0x7]}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 23:02:05 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x00', 0x0) fallocate(r0, 0x3, 0x7fff, 0x1) 23:02:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x40) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) 23:02:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "0f"}}]}, 0x13c}}, 0x0) 23:02:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xc, 0x121041) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x45, 0x2}, @rumble}) write$evdev(r0, &(0x7f0000000040), 0x373) 23:02:05 executing program 4: setreuid(0xffffffffffffffff, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "26fe7abd9f2613042f3837448134432c9b77da72c65ffa0b52bb1f5b7314766929d2ecbd3b6e9488a1b5e9b9add8f2ac161a476a00e9b0c4b23daad9fca997c5"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) 23:02:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) [ 330.539907][T20521] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 330.548277][T20521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:05 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x1, 0x0, [0x5, 0x6, 0xffff, 0xff], [0x7, 0x7fffffff, 0xfffffffffffffffe, 0x7, 0x55, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8001, 0xffff, 0x9, 0x2, 0x2, 0x1000, 0x39, 0x0, 0x3d3, 0x800, 0x10001, 0x401, 0x2, 0x1000, 0x6, 0x9, 0x2, 0x2000000000000, 0x5, 0x7f, 0x3f, 0x1, 0x9, 0x2, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x1, 0xfffffffffffff800, 0x0, 0x5, 0x8, 0x1, 0x400, 0x7fffffff, 0x7, 0x401, 0x1ff, 0x1, 0x6, 0xfff, 0xc6, 0x6, 0x10001, 0x9, 0x0, 0x8, 0x4, 0xe7d5, 0x280, 0x4, 0x67, 0xd5, 0xffffffffffffff95, 0xcf, 0x6, 0x7ff, 0xfffffffffffffe01, 0x3d24, 0x1, 0x1, 0x8, 0x5, 0x3, 0xffffffff00000000, 0xfff, 0xfffffffffffffffa, 0x4, 0x8, 0x2, 0x6, 0x20, 0x80000001, 0x2, 0x0, 0x1, 0x7, 0x3, 0x50, 0x7, 0xff, 0x95, 0xffff, 0x1000, 0x79, 0x0, 0x8, 0x7, 0x8, 0x0, 0x200, 0x10001, 0x1, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x3ff, 0x86, 0x7, 0x401, 0x0, 0x7]}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 23:02:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "0f"}}]}, 0x13c}}, 0x0) 23:02:05 executing program 4: setreuid(0xffffffffffffffff, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "26fe7abd9f2613042f3837448134432c9b77da72c65ffa0b52bb1f5b7314766929d2ecbd3b6e9488a1b5e9b9add8f2ac161a476a00e9b0c4b23daad9fca997c5"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) 23:02:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000200)=0x3, 0x40) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) [ 330.629156][T20539] netlink: 44202 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) [ 330.695634][T20548] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 330.703950][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.740799][T20557] netlink: 44202 bytes leftover after parsing attributes in process `syz-executor.3'. 23:02:05 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f4070009040002000000010000000000000008", 0x1d) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xac95, 0x0) 23:02:05 executing program 4: setreuid(0xffffffffffffffff, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "26fe7abd9f2613042f3837448134432c9b77da72c65ffa0b52bb1f5b7314766929d2ecbd3b6e9488a1b5e9b9add8f2ac161a476a00e9b0c4b23daad9fca997c5"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) 23:02:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "0f"}}]}, 0x13c}}, 0x0) 23:02:05 executing program 1: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000d07000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x1, 0x0, [0x5, 0x6, 0xffff, 0xff], [0x7, 0x7fffffff, 0xfffffffffffffffe, 0x7, 0x55, 0x8, 0x1, 0x0, 0x0, 0x0, 0x8001, 0xffff, 0x9, 0x2, 0x2, 0x1000, 0x39, 0x0, 0x3d3, 0x800, 0x10001, 0x401, 0x2, 0x1000, 0x6, 0x9, 0x2, 0x2000000000000, 0x5, 0x7f, 0x3f, 0x1, 0x9, 0x2, 0x5, 0xffffffff, 0x8, 0x3, 0x0, 0x1, 0xfffffffffffff800, 0x0, 0x5, 0x8, 0x1, 0x400, 0x7fffffff, 0x7, 0x401, 0x1ff, 0x1, 0x6, 0xfff, 0xc6, 0x6, 0x10001, 0x9, 0x0, 0x8, 0x4, 0xe7d5, 0x280, 0x4, 0x67, 0xd5, 0xffffffffffffff95, 0xcf, 0x6, 0x7ff, 0xfffffffffffffe01, 0x3d24, 0x1, 0x1, 0x8, 0x5, 0x3, 0xffffffff00000000, 0xfff, 0xfffffffffffffffa, 0x4, 0x8, 0x2, 0x6, 0x20, 0x80000001, 0x2, 0x0, 0x1, 0x7, 0x3, 0x50, 0x7, 0xff, 0x95, 0xffff, 0x1000, 0x79, 0x0, 0x8, 0x7, 0x8, 0x0, 0x200, 0x10001, 0x1, 0x7, 0x2, 0x3, 0x5, 0x9, 0x6, 0x9, 0x0, 0x7f, 0x3ff, 0x86, 0x7, 0x401, 0x0, 0x7]}) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="4c0000001000fff1fefefd956f76c9b724a6008000000000000000683440150024001b0000000000000000593ab782115ed9043d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0) 23:02:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) 23:02:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) 23:02:05 executing program 4: setreuid(0xffffffffffffffff, 0xee00) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "26fe7abd9f2613042f3837448134432c9b77da72c65ffa0b52bb1f5b7314766929d2ecbd3b6e9488a1b5e9b9add8f2ac161a476a00e9b0c4b23daad9fca997c5"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) 23:02:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001400)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, "0f"}}]}, 0x13c}}, 0x0) 23:02:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) [ 331.418073][T20569] netlink: 44202 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.438906][T20572] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 331.447178][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.480457][T20573] netlink: 44202 bytes leftover after parsing attributes in process `syz-executor.5'. [ 331.490426][T20573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:02:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) 23:02:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private, @empty}, 0xb) 23:02:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000292fe711f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000ace670325132510000e670325108002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000ace670325132510000e67032511a0064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000ace670325132510000e67032510300000000002e2e2020202020202020201000ace670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000ace670325132510000e670325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00)) [ 331.530068][T20587] netlink: 44202 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.599583][T20595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:02:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000240)="1c0000001200050f0c1000000049090000000a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0x314aaee635b9c1b6, 0x0, 0x0, 0xfffffffffffffeeb) write(0xffffffffffffffff, &(0x7f0000000000)="15000000140007", 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="ffad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)='6', 0x10a69, 0x10, 0x0, 0x4b6ae4f95a5de3b2) 23:02:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:06 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000200), &(0x7f0000002000/0x2000)=nil, &(0x7f00009b3000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4855, 0x0, 0x0, 0x0, 0x0) 23:02:06 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0xf}) 23:02:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private, @empty}, 0xb) 23:02:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x8000, &(0x7f00000000c0)) 23:02:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private, @empty}, 0xb) 23:02:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) [ 332.327115][T20614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 23:02:06 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000200), &(0x7f0000002000/0x2000)=nil, &(0x7f00009b3000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4855, 0x0, 0x0, 0x0, 0x0) 23:02:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @vsock={0x28, 0x0, 0x0, @hyper}, @nfc, @can}) 23:02:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000280)={@private, @empty}, 0xb) 23:02:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:07 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0xf}) 23:02:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0x4, 0x63) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 23:02:07 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000200), &(0x7f0000002000/0x2000)=nil, &(0x7f00009b3000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4855, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000262000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x3) 23:02:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockname(r0, 0x0, &(0x7f00000000c0)) 23:02:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000262000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x3) 23:02:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0x4, 0x63) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 23:02:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000262000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x3) 23:02:07 executing program 1: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000200), &(0x7f0000002000/0x2000)=nil, &(0x7f00009b3000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x4855, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0xf}) 23:02:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:07 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 23:02:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000262000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad6000/0x1000)=nil, 0x1000, 0x3) 23:02:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0x4, 0x63) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 23:02:07 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) getegid() getgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setregid(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) setgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002980)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002a80)=0xe8) mlockall(0x7) shmctl$SHM_UNLOCK(0x0, 0xc) munlockall() 23:02:07 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}], 0x1) 23:02:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec0", 0xbe}], 0x4, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:07 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0x4, 0x63) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 23:02:07 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0xf}) 23:02:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec0", 0xbe}], 0x4, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:07 executing program 5: r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 2: r0 = syz_io_uring_setup(0x58f1, &(0x7f0000000340), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x0) io_uring_enter(r0, 0x1a37, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:07 executing program 5: r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 5: r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) getegid() getgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setregid(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) setgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002980)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002a80)=0xe8) mlockall(0x7) shmctl$SHM_UNLOCK(0x0, 0xc) munlockall() 23:02:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:07 executing program 2: r0 = syz_io_uring_setup(0x58f1, &(0x7f0000000340), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x0) io_uring_enter(r0, 0x1a37, 0x0, 0x0, 0x0, 0x0) 23:02:07 executing program 5: r0 = syz_io_uring_setup(0x1370, &(0x7f0000000080), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/95, 0x5f}], 0x46}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec0", 0xbe}], 0x4, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet, @rc={0x1f, @none}, @nl=@unspec={0x0, 0x0, 0x21000000}, 0x2, 0x0, 0x0, 0x2}) 23:02:10 executing program 2: r0 = syz_io_uring_setup(0x58f1, &(0x7f0000000340), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x0) io_uring_enter(r0, 0x1a37, 0x0, 0x0, 0x0, 0x0) 23:02:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x86, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000140)=r2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1) 23:02:10 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) getegid() getgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setregid(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) setgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002980)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002a80)=0xe8) mlockall(0x7) shmctl$SHM_UNLOCK(0x0, 0xc) munlockall() 23:02:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet, @rc={0x1f, @none}, @nl=@unspec={0x0, 0x0, 0x21000000}, 0x2, 0x0, 0x0, 0x2}) 23:02:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet, @rc={0x1f, @none}, @nl=@unspec={0x0, 0x0, 0x21000000}, 0x2, 0x0, 0x0, 0x2}) 23:02:10 executing program 2: r0 = syz_io_uring_setup(0x58f1, &(0x7f0000000340), &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r3}, 0x0) io_uring_enter(r0, 0x1a37, 0x0, 0x0, 0x0, 0x0) 23:02:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @phonet, @rc={0x1f, @none}, @nl=@unspec={0x0, 0x0, 0x21000000}, 0x2, 0x0, 0x0, 0x2}) 23:02:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x40) 23:02:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec0", 0xbe}], 0x4, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x40) 23:02:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:13 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee6000/0x4000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000100)='./file0\x00'}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0xf0ffffff) 23:02:13 executing program 2: r0 = socket(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@can, 0x80) 23:02:13 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) getegid() getgroups(0x1, &(0x7f0000000400)=[0xffffffffffffffff]) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setregid(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setregid(0x0, 0x0) setgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002980)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002a80)=0xe8) mlockall(0x7) shmctl$SHM_UNLOCK(0x0, 0xc) munlockall() 23:02:13 executing program 2: r0 = socket(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@can, 0x80) 23:02:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x40) 23:02:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:13 executing program 2: r0 = socket(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@can, 0x80) 23:02:13 executing program 5: io_setup(0x5, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 23:02:13 executing program 2: r0 = socket(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@can, 0x80) 23:02:16 executing program 4: clone(0x66000d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8995, &(0x7f0000000000)=':') 23:02:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x40) 23:02:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:16 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f00000001c0)="c4c691019919da078ae04fa4ea57ff22ea8dc13b97be19af3dcb1800070000000000000000000000188f3b2c08ef133558f7ed7e325fc6b0f02a31e65591d23e2be9cafea586344424f9c7d3f5c16dea0788c0a38c8488031d08629033e11aa0dd7a21dc0738dea0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:16 executing program 5: io_setup(0x5, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 23:02:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45953cd5303ea9034019a38dc387cf4c2e1fea4b7a3d15134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9268103b66e1d49d31d322db", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "4fccc923ab8886f7027a68d7fab3e68b155582"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000140)=""/22, 0x16) 23:02:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45953cd5303ea9034019a38dc387cf4c2e1fea4b7a3d15134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9268103b66e1d49d31d322db", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r0, r0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x8, 0x0, 0x0, 0x0, 0x3f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xbf) unshare(0x60000000) 23:02:16 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f00000001c0)="c4c691019919da078ae04fa4ea57ff22ea8dc13b97be19af3dcb1800070000000000000000000000188f3b2c08ef133558f7ed7e325fc6b0f02a31e65591d23e2be9cafea586344424f9c7d3f5c16dea0788c0a38c8488031d08629033e11aa0dd7a21dc0738dea0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:16 executing program 5: io_setup(0x5, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 23:02:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45953cd5303ea9034019a38dc387cf4c2e1fea4b7a3d15134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9268103b66e1d49d31d322db", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) [ 341.949214][T20884] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 23:02:16 executing program 4: clone(0x66000d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8995, &(0x7f0000000000)=':') 23:02:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "4fccc923ab8886f7027a68d7fab3e68b155582"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000140)=""/22, 0x16) 23:02:16 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f00000001c0)="c4c691019919da078ae04fa4ea57ff22ea8dc13b97be19af3dcb1800070000000000000000000000188f3b2c08ef133558f7ed7e325fc6b0f02a31e65591d23e2be9cafea586344424f9c7d3f5c16dea0788c0a38c8488031d08629033e11aa0dd7a21dc0738dea0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45953cd5303ea9034019a38dc387cf4c2e1fea4b7a3d15134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9268103b66e1d49d31d322db", 0x77}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:16 executing program 5: io_setup(0x5, &(0x7f00000002c0)=0x0) r1 = socket$unix(0x1, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) 23:02:16 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x68, &(0x7f00000001c0)="c4c691019919da078ae04fa4ea57ff22ea8dc13b97be19af3dcb1800070000000000000000000000188f3b2c08ef133558f7ed7e325fc6b0f02a31e65591d23e2be9cafea586344424f9c7d3f5c16dea0788c0a38c8488031d08629033e11aa0dd7a21dc0738dea0"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r0, r0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x8, 0x0, 0x0, 0x0, 0x3f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xbf) unshare(0x60000000) 23:02:16 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r1, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x6609, 0x0) 23:02:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "4fccc923ab8886f7027a68d7fab3e68b155582"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000140)=""/22, 0x16) 23:02:16 executing program 4: clone(0x66000d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8995, &(0x7f0000000000)=':') 23:02:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:02:16 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:16 executing program 4: clone(0x66000d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8995, &(0x7f0000000000)=':') 23:02:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "4fccc923ab8886f7027a68d7fab3e68b155582"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000140)=""/22, 0x16) 23:02:16 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r1, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x6609, 0x0) 23:02:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:02:16 executing program 4: unshare(0x24000400) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)) 23:02:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0x3e}}], 0x18}}], 0x2, 0xe803) 23:02:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r0, r0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x8, 0x0, 0x0, 0x0, 0x3f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="4d28a31bd9eed88b003ffdc5345f563eb0036f40a4df7a65686ca122e9094f1e64adc859b6ec8f2343a25275b2cc3bf90c7d916f532f609102b27f2b2fcc7cc84db7ea93cf27e5d5365de92265f145bcb6fd02f358df6f400600000057a3657b8c086fd1b7c0d5eb74c8e21cc3d601430c2af6b64f4196ca996e06c82960ebd6ad1e2732cba649e18507755a290600f7069988cf40ac685f70bca11889ad39c7d5c5beb9227dbf8c943489144f061264c0684b6a14ff6c0d9200000000000000002480295a7a7c348241f7b98a35fb3bdb3b285aed01675a62936b8e58f67ad168ef064e019f776dece8fac3d7067d3cc15f6edaa91a59f1055a828a81ad2b93d4f27fdfebcc3d18585009b187a93358f68bbc5646f2ea2dbe3848eee1fb0f0b94431805d4f357f2b78f0702d6525b9cb2d0f3b98dc04dbe146e22bf1ef816e169b02f430ea58007e7c45fa0f9272c40d503af4c5df521dccae680c5ca72c9397d8eaa901d67f8b6c8f35049b7549c95db4462dfc47dd9be3a282a88b083f0519f261ea3517753c7441ec138ea28cc1114a0f628a65788daff2bbdde97e2be3b9f2f8a8c236a715aeda9a99a92732d9d039470608415980d46d024f4160088dc7c55cf682b3c890ac2df198bf20daecfc6d6b6ce8f879622d7370228203f8e9be3f39665315d6abf1c607fec631aa6217ef1a645514ce6f6726a4bda5e8d8f3f77f26c3048b7e0d48a187543a0f88583e68b2fa5b74f581b31647cb1fb46594cbd2dc769a465e0088318c3a785e35758e7a5a3db6d1a7aeaec951345d500565c985944235942bd240837"], 0xbf) unshare(0x60000000) 23:02:16 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r1, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x6609, 0x0) 23:02:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:02:16 executing program 4: unshare(0x24000400) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)) 23:02:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0x3e}}], 0x18}}], 0x2, 0xe803) 23:02:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x365243, 0x97) sendfile(r0, r0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x108, 0x0, 0x2, 0x46a, 0x8, 0x0, 0x0, 0x0, 0x3f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x220340, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xbf) unshare(0x60000000) 23:02:17 executing program 4: unshare(0x24000400) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)) 23:02:17 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r1, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x6609, 0x0) 23:02:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0x3e}}], 0x18}}], 0x2, 0xe803) 23:02:17 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x12f}]) 23:02:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004980)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@flowinfo={{0x14, 0x29, 0x3e}}], 0x18}}], 0x2, 0xe803) 23:02:17 executing program 4: unshare(0x24000400) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000002c0)) 23:02:17 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 3: syz_io_uring_setup(0x2e39, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x97}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002700), &(0x7f0000002740)) 23:02:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, 0x0, r5) 23:02:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}}, 0x0) 23:02:17 executing program 0: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:17 executing program 3: r0 = fork() ptrace$peeksig(0x10, r0, 0x0, 0x0) fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000180), 0x0) 23:02:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, 0x0, r5) 23:02:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}}, 0x0) 23:02:17 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, 0x0, r5) 23:02:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}}, 0x0) 23:02:17 executing program 3: r0 = fork() ptrace$peeksig(0x10, r0, 0x0, 0x0) fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000180), 0x0) 23:02:17 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setresgid(0x0, 0x0, r5) 23:02:17 executing program 3: r0 = fork() ptrace$peeksig(0x10, r0, 0x0, 0x0) fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000180), 0x0) 23:02:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in, 0x0, 0x0, 0x33}, [@mark={0xc}]}, 0x34}}, 0x0) 23:02:17 executing program 0: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:17 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x3, 0x0, 0x32e2) 23:02:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') preadv(r0, &(0x7f00000024c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x20, 0x0) 23:02:17 executing program 3: r0 = fork() ptrace$peeksig(0x10, r0, 0x0, 0x0) fork() ptrace$peeksig(0x4209, r0, &(0x7f0000000180), 0x0) 23:02:17 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 2: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:17 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001300)="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", 0x206}], 0x1, 0x0, 0x0) pwritev2(r0, &(0x7f0000001500), 0x2f, 0x0, 0x0, 0x0) 23:02:17 executing program 0: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:17 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200), 0xf642e7e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:02:17 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x3, 0x0, 0x32e2) 23:02:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000200), 0x20) splice(r2, 0x0, r4, 0x0, 0x10000, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:17 executing program 2: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:18 executing program 0: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:18 executing program 5: clone3(&(0x7f0000002100)={0x10000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:02:18 executing program 2: unshare(0x60000) unshare(0x4a000400) unshare(0x48000200) 23:02:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 23:02:18 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x3, 0x0, 0x32e2) 23:02:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 23:02:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 23:02:18 executing program 2: syz_io_uring_setup(0x5a0b, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:02:18 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x3, 0x0, 0x32e2) 23:02:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 23:02:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 23:02:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000200), 0x20) splice(r2, 0x0, r4, 0x0, 0x10000, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:18 executing program 2: syz_io_uring_setup(0x5a0b, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:02:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) clone(0x100818900, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 23:02:18 executing program 2: syz_io_uring_setup(0x5a0b, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:02:18 executing program 5: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='m', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 23:02:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 23:02:18 executing program 2: syz_io_uring_setup(0x5a0b, &(0x7f0000000100)={0x0, 0x0, 0x8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 23:02:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) clone(0x100818900, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 23:02:18 executing program 5: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 23:02:18 executing program 4: unshare(0x20600) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) fcntl$setownex(r0, 0xf, 0x0) 23:02:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) clone(0x100818900, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) [ 343.972774][T21353] loop5: detected capacity change from 0 to 264192 23:02:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000200), 0x20) splice(r2, 0x0, r4, 0x0, 0x10000, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) clone(0x100818900, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 23:02:18 executing program 2: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') faccessat(r0, &(0x7f0000000580)='./file0\x00', 0x0) 23:02:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 23:02:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') faccessat(r0, &(0x7f0000000580)='./file0\x00', 0x0) 23:02:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 23:02:18 executing program 5: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:18 executing program 1: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') faccessat(r0, &(0x7f0000000580)='./file0\x00', 0x0) 23:02:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 23:02:18 executing program 2: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") [ 344.275656][T21436] loop5: detected capacity change from 0 to 264192 23:02:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000200), 0x20) splice(r2, 0x0, r4, 0x0, 0x10000, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 23:02:18 executing program 1: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r0) 23:02:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') faccessat(r0, &(0x7f0000000580)='./file0\x00', 0x0) 23:02:18 executing program 2: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:18 executing program 0: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:18 executing program 5: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:19 executing program 2: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:19 executing program 1: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) 23:02:19 executing program 1: request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0xffffffffffffffff) 23:02:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) write$sndseq(r0, &(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x5, 0x0, 0x0, 0xfe, @time, {}, {}, @raw8={"d608ee00b974312bf4c3a6ae"}}], 0x38) [ 344.588884][T21525] loop5: detected capacity change from 0 to 264192 23:02:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) write$sndseq(r0, &(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x5, 0x0, 0x0, 0xfe, @time, {}, {}, @raw8={"d608ee00b974312bf4c3a6ae"}}], 0x38) 23:02:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}}}]}, 0x13c}}, 0x0) 23:02:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a000400) ioctl$MON_IOCG_STATS(r0, 0x9201, 0x0) 23:02:19 executing program 5: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) fallocate(r0, 0x0, 0x0, 0x2000402) [ 344.786363][T21567] loop5: detected capacity change from 0 to 264192 23:02:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}}}]}, 0x13c}}, 0x0) 23:02:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a000400) ioctl$MON_IOCG_STATS(r0, 0x9201, 0x0) 23:02:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) write$sndseq(r0, &(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x5, 0x0, 0x0, 0xfe, @time, {}, {}, @raw8={"d608ee00b974312bf4c3a6ae"}}], 0x38) 23:02:19 executing program 0: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit={{0x14}}], 0x18}, 0x7ffffff7) 23:02:19 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit={{0x14}}], 0x18}, 0x7ffffff7) 23:02:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001) write$sndseq(r0, &(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x5, 0x0, 0x0, 0xfe, @time, {}, {}, @raw8={"d608ee00b974312bf4c3a6ae"}}], 0x38) 23:02:19 executing program 0: clone(0x29ab43db5b8099d4, 0x0, &(0x7f0000000600), 0x0, 0x0) clone(0x40104000, &(0x7f0000000080)="e3f8ef88199adcad4f7ae39c5dd01fd2609d2ac19a0765a4863438556c23c1192882ba7554", &(0x7f0000000000), &(0x7f0000000100), 0x0) clone(0x40044000, &(0x7f0000000980)="7371613774a778905fb98879f7e892b8d0caf886fdbbfbc2bf41da000000a26316dec5e25f999f5a4a3f30f6f97a6dd5027ccbd255adfd6618fa3add4f08205daf1db50cf66cb36c1f5ff4bbbca18722385d63e01d777bd152dd6f016eb3f629c49edd1d675619376a733887d1313354e5f5d273ce64c80d177ce63c24534b7c151ba58626cb16c9c6c76d7663745a7b7b89c42931cc562b78d4ff9e38a13392a5af9cf7be48d30aa87d1d887917ed590946d8fc9b829844415409a55ed184f1329f0c083d798a00f2", &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="47f0d9ad6b46bdd458152be5497c6b223ed6a8b12f9218bd45fb5e8dd2fcc08b051d1fad0cb9ced62ec782b8a2cef649001ac8361c9788cf06bfadc79da6abe5bedd375f9e745631ee406a548cc069e0ed5642cbf1c9526fd35b") 23:02:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147c7378f364602812c66538d750d6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa08eb298802d8f6c177d77439352507f7018b31fdc6db429857e794878a99387b088b19a2380b3ada751e68147db6dcdf4dc57753e81d2280a967bd6850a6e3f8fe11965f40ce332902d5f5a1fa1be9d8ffd5a6c0f8f408ceb77fadc5d7939932ddcbe7316df2b2905bf3f5f8d655e5cd418c7d84ed98aa3a05bec093e307b2d3bdea18093e66ab152db8d83d23366ee6824d69ec8c64f4501da2b6ad7a512abe98d2a5eb03a31e75e88de15eb2322da239cb592eab0d32bd705db4e896ce8a9cec", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}}}]}, 0x13c}}, 0x0) 23:02:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit={{0x14}}], 0x18}, 0x7ffffff7) 23:02:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a000400) ioctl$MON_IOCG_STATS(r0, 0x9201, 0x0) 23:02:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000203010079a5a744d7f9", 0x16}], 0x0, &(0x7f0000010d00)=ANY=[]) 23:02:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5b40714d531db941d0043c7188f78325712fbdc3ebff48ac8507989b1fb74949ed1bc659188f72731ddf8b55e064b6dc", 0x30}], 0x1}}], 0x1, 0x0) 23:02:22 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@hoplimit={{0x14}}], 0x18}, 0x7ffffff7) 23:02:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback}, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}}}]}, 0x13c}}, 0x0) 23:02:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) unshare(0x2a000400) ioctl$MON_IOCG_STATS(r0, 0x9201, 0x0) 23:02:22 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a753a1fef2c560015000000000000fb8005128e7e4d939955f8ac396203784000400f573fbf000000000000000761f35e959f130dec95128ce7ec033dc0a380543bfc99320be1c1bb99bb063fb66f2d696569eada31b09fbd15f0332701d9d14a3f3109d666578cc0266bce7860eaaf305a0ee2af0f82dfefd5e00d421b000000000000000000", 0xdd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 347.726531][T21636] loop2: detected capacity change from 0 to 264192 [ 347.738903][T21636] FAT-fs (loop2): bogus sectors per cluster 3 [ 347.745058][T21636] FAT-fs (loop2): Can't find a valid FAT filesystem 23:02:22 executing program 5: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) 23:02:22 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) [ 347.830965][T21636] loop2: detected capacity change from 0 to 264192 [ 347.840116][T21636] FAT-fs (loop2): bogus sectors per cluster 3 [ 347.846326][T21636] FAT-fs (loop2): Can't find a valid FAT filesystem 23:02:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 23:02:25 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 23:02:25 executing program 0: futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) 23:02:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="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", 0x104}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x3) 23:02:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000203010079a5a744d7f9", 0x16}], 0x0, &(0x7f0000010d00)=ANY=[]) 23:02:25 executing program 5: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) 23:02:25 executing program 5: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) 23:02:25 executing program 0: futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) 23:02:25 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 23:02:25 executing program 0: futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) [ 350.736652][T21685] loop2: detected capacity change from 0 to 264192 [ 350.748172][T21685] FAT-fs (loop2): bogus sectors per cluster 3 [ 350.754304][T21685] FAT-fs (loop2): Can't find a valid FAT filesystem 23:02:25 executing program 0: futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) 23:02:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000203010079a5a744d7f9", 0x16}], 0x0, &(0x7f0000010d00)=ANY=[]) [ 350.847794][T21706] loop2: detected capacity change from 0 to 264192 [ 350.857345][T21706] FAT-fs (loop2): bogus sectors per cluster 3 [ 350.863485][T21706] FAT-fs (loop2): Can't find a valid FAT filesystem 23:02:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000203010079a5a744d7f9", 0x16}], 0x0, &(0x7f0000010d00)=ANY=[]) 23:02:28 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000000080)) 23:02:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 23:02:28 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 23:02:28 executing program 5: unshare(0x40400) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/228, &(0x7f0000000100)=0xe4) 23:02:28 executing program 4: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)="5f62ff9f586ff2e92b1e0546ea30c4c9bfc4d22376a55754ada99e36c6b797da706df759d8fdf2f02002dfa7b3d9c150e85cbe6a19bdcd52801338406b9c85061d6872cc8f42ae93b09a50ba7a1dfb1396afeb785a37bc953d19bdea134b3c2651e3773a97ac40a1259e1bdce0b1fdba9ab9e443d0484a4136dfbc8105a04b8621cbb1c271a476373ae76100cd40b1fb8cee32d6b85f5018d8ea27a9fb93ec66190a", 0xa2}], 0x1) 23:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xcc, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b0c52606991437be044fa4ea57ff22eafabe19af3dc4a01419cd2386ad59157689c9c6a47312334cd4afab5d8673c6f1e036a1fd1bb12a96ac2b7f0fb4aabebae8dc5dffbcd48a70502156e2bb08487ddca7fdb8e4189ebe84c95ed983ac128b83e5150eaa22c1b17e8b0686d3b5a92c184464c96a362a3bbd10db5b4763ba355156641ba9f11e37b4944bd60bb0b536473b19cbbfdaddf5a30f0e8ff6ad7fd0edd5f52735999a5f62287f651c37a552be88aaa77a8ce88cb9d8fabace"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000200)=0x8, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 23:02:28 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = memfd_create(&(0x7f00000003c0)='\x8a\xda]\xb0\x1f\xa4\xae\xa7\xc2\x16}\x142\xdd>\xea\x84\xc5\xf8P\xe0|\x18\xa4\xb1\x95\xae\xc1\xfd\xc8\xf7\xeb\x8d=y\xed\bT\x8eAkG\x1b\xce\xf6\x9db\xc4\xb0\x1a\xb5\x95\xeb\xf3\x83\xa4M\xa6\x11\x1c\xe6C\xcd\xdd\x8d,\xf40\xdb\xe6J\xe0\x7f4\xa3 \x10\xba_\x01\x82\xbe/I\x86\xb9\x8d\x82\x9d@\a\xaazMhH\x9d\xe3\xaf\xf1\x878\xe2\x14\x8c\xfcq\n![\x88K\x8f}\xbf>~sz_\v\x12l\x1f\xa1\x1c\xa5\xdc\xc1N\x1f\xecv\xbb\v2 \xc6\'pbw\x97\x01\x00\x88\xc4\xb4\x91!K\xa6\xd9\xb8\xf9n\xf1\xc1\f9G\xe9\x8d.\xc4\xab\xd3N}-.b\xb8\x0f\xb3Mm\x1fX\xa04J\xb99]a\f\xeb\x04\x03BQ\x01\xe05\xf3\xf9MU3\xab\x00Cz\xa0m;\x7fl\xe2\xbb2E\xa8\x9db\xd4\xd7\x94\x80\xe3\x91k\xac\x8a\xf3\f\xd6\tiT\x11\as\xcc\xdb\xc6\xedEdk\xc4^k0l\xd4\x15\xfd\t\xc8/b\xc9\x14\xe0\xd0\x024\x8a\xf8}&', 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 23:02:28 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, 0x0) 23:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xcc, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b0c52606991437be044fa4ea57ff22eafabe19af3dc4a01419cd2386ad59157689c9c6a47312334cd4afab5d8673c6f1e036a1fd1bb12a96ac2b7f0fb4aabebae8dc5dffbcd48a70502156e2bb08487ddca7fdb8e4189ebe84c95ed983ac128b83e5150eaa22c1b17e8b0686d3b5a92c184464c96a362a3bbd10db5b4763ba355156641ba9f11e37b4944bd60bb0b536473b19cbbfdaddf5a30f0e8ff6ad7fd0edd5f52735999a5f62287f651c37a552be88aaa77a8ce88cb9d8fabace"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) [ 353.785869][T21728] loop2: detected capacity change from 0 to 264192 [ 353.820648][T21728] FAT-fs (loop2): bogus sectors per cluster 3 [ 353.826788][T21728] FAT-fs (loop2): Can't find a valid FAT filesystem 23:02:28 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) 23:02:28 executing program 1: r0 = semget$private(0x0, 0x20000000102, 0x0) semop(r0, &(0x7f0000000140)=[{0x0, 0x4}], 0x1) semop(r0, &(0x7f0000000000)=[{}], 0x1) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 23:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, 0x0) 23:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xcc, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b0c52606991437be044fa4ea57ff22eafabe19af3dc4a01419cd2386ad59157689c9c6a47312334cd4afab5d8673c6f1e036a1fd1bb12a96ac2b7f0fb4aabebae8dc5dffbcd48a70502156e2bb08487ddca7fdb8e4189ebe84c95ed983ac128b83e5150eaa22c1b17e8b0686d3b5a92c184464c96a362a3bbd10db5b4763ba355156641ba9f11e37b4944bd60bb0b536473b19cbbfdaddf5a30f0e8ff6ad7fd0edd5f52735999a5f62287f651c37a552be88aaa77a8ce88cb9d8fabace"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xcc, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b0c52606991437be044fa4ea57ff22eafabe19af3dc4a01419cd2386ad59157689c9c6a47312334cd4afab5d8673c6f1e036a1fd1bb12a96ac2b7f0fb4aabebae8dc5dffbcd48a70502156e2bb08487ddca7fdb8e4189ebe84c95ed983ac128b83e5150eaa22c1b17e8b0686d3b5a92c184464c96a362a3bbd10db5b4763ba355156641ba9f11e37b4944bd60bb0b536473b19cbbfdaddf5a30f0e8ff6ad7fd0edd5f52735999a5f62287f651c37a552be88aaa77a8ce88cb9d8fabace"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() tkill(r2, 0x40) 23:02:28 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) 23:02:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, 0x0) 23:02:28 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) 23:02:29 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = memfd_create(&(0x7f00000003c0)='\x8a\xda]\xb0\x1f\xa4\xae\xa7\xc2\x16}\x142\xdd>\xea\x84\xc5\xf8P\xe0|\x18\xa4\xb1\x95\xae\xc1\xfd\xc8\xf7\xeb\x8d=y\xed\bT\x8eAkG\x1b\xce\xf6\x9db\xc4\xb0\x1a\xb5\x95\xeb\xf3\x83\xa4M\xa6\x11\x1c\xe6C\xcd\xdd\x8d,\xf40\xdb\xe6J\xe0\x7f4\xa3 \x10\xba_\x01\x82\xbe/I\x86\xb9\x8d\x82\x9d@\a\xaazMhH\x9d\xe3\xaf\xf1\x878\xe2\x14\x8c\xfcq\n![\x88K\x8f}\xbf>~sz_\v\x12l\x1f\xa1\x1c\xa5\xdc\xc1N\x1f\xecv\xbb\v2 \xc6\'pbw\x97\x01\x00\x88\xc4\xb4\x91!K\xa6\xd9\xb8\xf9n\xf1\xc1\f9G\xe9\x8d.\xc4\xab\xd3N}-.b\xb8\x0f\xb3Mm\x1fX\xa04J\xb99]a\f\xeb\x04\x03BQ\x01\xe05\xf3\xf9MU3\xab\x00Cz\xa0m;\x7fl\xe2\xbb2E\xa8\x9db\xd4\xd7\x94\x80\xe3\x91k\xac\x8a\xf3\f\xd6\tiT\x11\as\xcc\xdb\xc6\xedEdk\xc4^k0l\xd4\x15\xfd\t\xc8/b\xc9\x14\xe0\xd0\x024\x8a\xf8}&', 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 23:02:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0xffffffffffffffff, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:02:29 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) 23:02:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b40, 0x0) 23:02:29 executing program 1: setreuid(0xffffffffffffffff, 0xee01) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x30000008}) 23:02:29 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:29 executing program 1: setreuid(0xffffffffffffffff, 0xee01) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x30000008}) 23:02:29 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:02:29 executing program 1: setreuid(0xffffffffffffffff, 0xee01) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x30000008}) 23:02:29 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:02:29 executing program 1: setreuid(0xffffffffffffffff, 0xee01) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x30000008}) 23:02:30 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = memfd_create(&(0x7f00000003c0)='\x8a\xda]\xb0\x1f\xa4\xae\xa7\xc2\x16}\x142\xdd>\xea\x84\xc5\xf8P\xe0|\x18\xa4\xb1\x95\xae\xc1\xfd\xc8\xf7\xeb\x8d=y\xed\bT\x8eAkG\x1b\xce\xf6\x9db\xc4\xb0\x1a\xb5\x95\xeb\xf3\x83\xa4M\xa6\x11\x1c\xe6C\xcd\xdd\x8d,\xf40\xdb\xe6J\xe0\x7f4\xa3 \x10\xba_\x01\x82\xbe/I\x86\xb9\x8d\x82\x9d@\a\xaazMhH\x9d\xe3\xaf\xf1\x878\xe2\x14\x8c\xfcq\n![\x88K\x8f}\xbf>~sz_\v\x12l\x1f\xa1\x1c\xa5\xdc\xc1N\x1f\xecv\xbb\v2 \xc6\'pbw\x97\x01\x00\x88\xc4\xb4\x91!K\xa6\xd9\xb8\xf9n\xf1\xc1\f9G\xe9\x8d.\xc4\xab\xd3N}-.b\xb8\x0f\xb3Mm\x1fX\xa04J\xb99]a\f\xeb\x04\x03BQ\x01\xe05\xf3\xf9MU3\xab\x00Cz\xa0m;\x7fl\xe2\xbb2E\xa8\x9db\xd4\xd7\x94\x80\xe3\x91k\xac\x8a\xf3\f\xd6\tiT\x11\as\xcc\xdb\xc6\xedEdk\xc4^k0l\xd4\x15\xfd\t\xc8/b\xc9\x14\xe0\xd0\x024\x8a\xf8}&', 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 23:02:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0xffffffffffffffff, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:02:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:02:32 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x2, 0x6, @broadcast}, 0x10) 23:02:32 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:32 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:32 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = memfd_create(&(0x7f00000003c0)='\x8a\xda]\xb0\x1f\xa4\xae\xa7\xc2\x16}\x142\xdd>\xea\x84\xc5\xf8P\xe0|\x18\xa4\xb1\x95\xae\xc1\xfd\xc8\xf7\xeb\x8d=y\xed\bT\x8eAkG\x1b\xce\xf6\x9db\xc4\xb0\x1a\xb5\x95\xeb\xf3\x83\xa4M\xa6\x11\x1c\xe6C\xcd\xdd\x8d,\xf40\xdb\xe6J\xe0\x7f4\xa3 \x10\xba_\x01\x82\xbe/I\x86\xb9\x8d\x82\x9d@\a\xaazMhH\x9d\xe3\xaf\xf1\x878\xe2\x14\x8c\xfcq\n![\x88K\x8f}\xbf>~sz_\v\x12l\x1f\xa1\x1c\xa5\xdc\xc1N\x1f\xecv\xbb\v2 \xc6\'pbw\x97\x01\x00\x88\xc4\xb4\x91!K\xa6\xd9\xb8\xf9n\xf1\xc1\f9G\xe9\x8d.\xc4\xab\xd3N}-.b\xb8\x0f\xb3Mm\x1fX\xa04J\xb99]a\f\xeb\x04\x03BQ\x01\xe05\xf3\xf9MU3\xab\x00Cz\xa0m;\x7fl\xe2\xbb2E\xa8\x9db\xd4\xd7\x94\x80\xe3\x91k\xac\x8a\xf3\f\xd6\tiT\x11\as\xcc\xdb\xc6\xedEdk\xc4^k0l\xd4\x15\xfd\t\xc8/b\xc9\x14\xe0\xd0\x024\x8a\xf8}&', 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 23:02:32 executing program 3: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 23:02:32 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x2, 0x6, @broadcast}, 0x10) 23:02:32 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x2, 0x6, @broadcast}, 0x10) 23:02:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:32 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x2, 0x6, @broadcast}, 0x10) 23:02:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0xffffffffffffffff, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:02:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, 0x0, 0x0) 23:02:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:35 executing program 4: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:35 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000100)={0x1}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 23:02:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000000)) 23:02:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000140)={'lo\x00', 0x0}) 23:02:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, 0x0, 0x0) 23:02:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000000)) 23:02:35 executing program 3: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080), 0x8000, 0x0) 23:02:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, 0x0, 0x0) 23:02:35 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000000)) 23:02:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0xffffffffffffffff, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440)="66530700ae", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 23:02:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:38 executing program 2: request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='logon\x00', 0xfffffffffffffffe) 23:02:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x54]}}]}) 23:02:38 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000000)) 23:02:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_int(r0, 0x0, 0x10, 0x0, 0x0) 23:02:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:38 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125d, &(0x7f0000001700)) 23:02:38 executing program 2: clone(0xe02ab100, 0x0, 0x0, 0x0, 0x0) 23:02:38 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x54]}}]}) 23:02:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) clone(0x2000000002008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x9fC\x9cD\x9c\xdd\xfe\xc9', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:02:41 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:41 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:41 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x54]}}]}) 23:02:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{}, 'port0\x00'}) tkill(r1, 0x7) 23:02:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) clone(0x2000000002008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x9fC\x9cD\x9c\xdd\xfe\xc9', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:02:41 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:41 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x54]}}]}) 23:02:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) clone(0x2000000002008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x9fC\x9cD\x9c\xdd\xfe\xc9', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:02:41 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x36) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) clone(0x2000000002008300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\xa1\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x9fC\x9cD\x9c\xdd\xfe\xc9', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:02:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xd000, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 23:02:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x38}}, 0x0) 23:02:42 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x73) 23:02:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xd000, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 23:02:42 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x107, 0x8, 0x0, 0x4) 23:02:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{}, 'port0\x00'}) tkill(r1, 0x7) 23:02:42 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:42 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x107, 0x8, 0x0, 0x4) 23:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x73) 23:02:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xd000, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 23:02:42 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x107, 0x8, 0x0, 0x4) 23:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x73) 23:02:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x400, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x73) 23:02:43 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:43 executing program 4: r0 = socket(0x11, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x107, 0x8, 0x0, 0x4) 23:02:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xd000, 0x0) clone(0x20002044dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) 23:02:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x74, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x74}}, 0x0) 23:02:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{}, 'port0\x00'}) tkill(r1, 0x7) 23:02:43 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x1, r0, 0x5}) 23:02:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:02:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x74, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x74}}, 0x0) 23:02:43 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) [ 368.722143][T22108] __nla_validate_parse: 2 callbacks suppressed [ 368.722159][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.737602][T22108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:02:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x74, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x74}}, 0x0) 23:02:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 368.792681][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.801949][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.857180][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.866450][T22136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:02:44 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={[{@huge_within_size}], [{@appraise}]}) 23:02:44 executing program 3: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:02:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x74, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x74}}, 0x0) 23:02:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8d, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000080)=""/238, 0xee) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x0, 0x4}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{}, 'port0\x00'}) tkill(r1, 0x7) 23:02:44 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='pipefs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x5) tkill(r1, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:02:44 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={[{@huge_within_size}], [{@appraise}]}) [ 369.587802][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.595844][T22154] tmpfs: Unsupported parameter 'huge' [ 369.597051][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.611510][T22155] tmpfs: Unsupported parameter 'huge' 23:02:44 executing program 3: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x170, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd891fa870d434223169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36000000007baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0132044681400bf30024514a6d2675bab926125c43083e773eb3d8dea74700066ee70c42196645292c0e4c3622c102a16be9066fc27e7d4466cbb295eb7f286dcccfde0740cb90366fdd064888fc176574bd977c8c7ef316262a70e75001b11c7c49ae8797518e425ef90808952aedaf7f1b7b2063f7f7cce786729c545c89809b08dfd961d1ae94ebb46bdc07c48a2d24f18690f81f45a893ce4149600f33e781feca313b077ace85e051ddbd59293a804369d29aace0f26a0397b66bf42918251e3179b8ef117d1ac01797649d7445f0464332f2856e1a6697f3b7022"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:02:44 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={[{@huge_within_size}], [{@appraise}]}) [ 369.640065][T22160] tmpfs: Unsupported parameter 'huge' [ 369.681502][T22170] tmpfs: Unsupported parameter 'huge' 23:02:46 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 23:02:46 executing program 3: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x170, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:02:46 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) clone(0x2f802900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={[{@huge_within_size}], [{@appraise}]}) 23:02:46 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='pipefs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x5) tkill(r1, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:02:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:02:46 executing program 3: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x170, &(0x7f0000000140)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd891fa870d434223169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dbea7410b36000000007baa17dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0132044681400bf30024514a6d2675bab926125c43083e773eb3d8dea74700066ee70c42196645292c0e4c3622c102a16be9066fc27e7d4466cbb295eb7f286dcccfde0740cb90366fdd064888fc176574bd977c8c7ef316262a70e75001b11c7c49ae8797518e425ef90808952aedaf7f1b7b2063f7f7cce786729c545c89809b08dfd961d1ae94ebb46bdc07c48a2d24f18690f81f45a893ce4149600f33e781feca313b077ace85e051ddbd59293a804369d29aace0f26a0397b66bf42918251e3179b8ef117d1ac01797649d7445f0464332f2856e1a6697f3b7022"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:02:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 23:02:46 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:46 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) [ 371.808763][T22195] tmpfs: Unsupported parameter 'huge' 23:02:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:02:46 executing program 3: clone(0x80040300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x170, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x40) 23:02:46 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) dup3(r0, r1, 0x0) 23:02:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 23:02:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r1, r0, 0x0, 0xf6c1) 23:02:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000)='3\"', 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:02:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) 23:02:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='pipefs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x5) tkill(r1, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:02:49 executing program 2: unshare(0x6c060000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 23:02:49 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:49 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000)='3\"', 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:02:49 executing program 2: unshare(0x6c060000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 23:02:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000)='3\"', 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) [ 374.850486][T22250] netlink: 36377 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.882341][T22266] netlink: 36377 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x3c) sendto$inet6(r0, &(0x7f0000000000)='3\"', 0x5c8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141409}}, 0x1c) 23:02:49 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) 23:02:49 executing program 2: unshare(0x6c060000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 374.949605][T22278] netlink: 36377 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:49 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x54, 0x0) [ 375.049722][T22296] netlink: 36377 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:52 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) clone(0x20001000104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='pipefs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000040)=0x5) tkill(r1, 0x5) creat(&(0x7f0000000080)='./file0\x00', 0x0) 23:02:52 executing program 2: unshare(0x6c060000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="769100001400010085be0000000f00000a040000010000000003"], 0x1}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x2c}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 23:02:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) 23:02:52 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) wait4(0x0, 0x0, 0x0, 0x0) 23:02:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:02:52 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x54, 0x0) 23:02:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x811f, 0x0, "1f2053bc026763eac1a859160d33aaf3aa1e42"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x9) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x53, 0x0, 0x0, 0x0, 0x0, "00e95d00000000000079000000008000"}) [ 377.840901][T22313] netlink: 36377 bytes leftover after parsing attributes in process `syz-executor.2'. 23:02:52 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e71b0fa1f147a8378f3657cdcf86db93aa6ed9cbc6a9e00b9e626aa995d690c8a2372286677850ab8e9b7583", 0x34}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x1e) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010004000000000002000100", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="01000000", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1000020000000000"], 0x7c, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 23:02:52 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x54, 0x0) 23:02:52 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:52 executing program 1: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r4, r3, 0x0) 23:02:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0xbe, 0x11, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:02:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:55 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x54, 0x0) 23:02:55 executing program 2: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x18, 0x0, 0x0) 23:02:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe70, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "00000000e6ffffff", '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 23:02:55 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:55 executing program 2: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x18, 0x0, 0x0) 23:02:55 executing program 0: clone3(&(0x7f0000002100)={0x12000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[0xffffffffffffffff], 0x1}, 0x58) 23:02:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2200c0, 0x0) readlinkat(r0, &(0x7f0000000080)='\x00', &(0x7f0000000100)=""/62, 0x3e) 23:02:55 executing program 2: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x18, 0x0, 0x0) 23:02:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)="b7757d184306310be3c34e5c255e04f804972af0572df97c3843bf1b25", 0xfdef}], 0x2) 23:02:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2200c0, 0x0) readlinkat(r0, &(0x7f0000000080)='\x00', &(0x7f0000000100)=""/62, 0x3e) 23:02:55 executing program 2: r0 = socket$inet_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x29, 0x18, 0x0, 0x0) 23:02:56 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2200c0, 0x0) readlinkat(r0, &(0x7f0000000080)='\x00', &(0x7f0000000100)=""/62, 0x3e) 23:02:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x80, 0x0}}], 0x1, 0x0) 23:02:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 23:02:56 executing program 0: r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 23:02:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x80, 0x0}}], 0x1, 0x0) 23:02:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2200c0, 0x0) readlinkat(r0, &(0x7f0000000080)='\x00', &(0x7f0000000100)=""/62, 0x3e) 23:02:56 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x80, 0x0}}], 0x1, 0x0) 23:02:56 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 23:02:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 23:02:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x80, 0x0}}], 0x1, 0x0) 23:02:57 executing program 4: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:57 executing program 0: prctl$PR_SET_NAME(0x25, &(0x7f0000000000)='/dev/rtc0\x00') 23:02:57 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0xffff, 0x0) 23:02:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 23:02:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 23:02:57 executing program 0: prctl$PR_SET_NAME(0x25, &(0x7f0000000000)='/dev/rtc0\x00') 23:02:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 23:02:57 executing program 5: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x2}) 23:02:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 23:02:57 executing program 0: prctl$PR_SET_NAME(0x25, &(0x7f0000000000)='/dev/rtc0\x00') 23:02:57 executing program 1: unshare(0xa000680) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x180800) 23:02:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 23:02:57 executing program 0: prctl$PR_SET_NAME(0x25, &(0x7f0000000000)='/dev/rtc0\x00') 23:02:57 executing program 1: unshare(0xa000680) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x180800) 23:02:59 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0xffff, 0x0) 23:02:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x1}}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 23:02:59 executing program 1: unshare(0xa000680) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x180800) 23:02:59 executing program 4: r0 = socket$inet(0x2, 0x2000000000003, 0x6) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x0) 23:02:59 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000f40)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:02:59 executing program 5: clone(0x451a0000, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:02:59 executing program 4: r0 = socket$inet(0x2, 0x2000000000003, 0x6) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x0) 23:02:59 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000f40)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:02:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) fallocate(r1, 0x11, 0x0, 0x1f) 23:02:59 executing program 1: unshare(0xa000680) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x180800) 23:02:59 executing program 5: clone(0x451a0000, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:02:59 executing program 4: r0 = socket$inet(0x2, 0x2000000000003, 0x6) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x0) 23:03:00 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0xffff, 0x0) 23:03:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000f40)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:03:00 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:00 executing program 4: r0 = socket$inet(0x2, 0x2000000000003, 0x6) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, 0x0, 0x0) 23:03:00 executing program 5: clone(0x451a0000, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:03:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) fallocate(r1, 0x11, 0x0, 0x1f) 23:03:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) dup2(r0, r1) 23:03:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000f40)={0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) 23:03:00 executing program 5: clone(0x451a0000, 0x0, &(0x7f0000000080), 0x0, 0x0) 23:03:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xc}}], 0x1, 0x0) 23:03:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) [ 385.838020][T22592] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 386.118588][T22564] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:03:01 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0xffff, 0x0) 23:03:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) 23:03:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) set_mempolicy(0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x6deb, 0x0, 0x0, 0x0, 0x0) 23:03:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xc}}], 0x1, 0x0) 23:03:01 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) fallocate(r1, 0x11, 0x0, 0x1f) 23:03:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) set_mempolicy(0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x6deb, 0x0, 0x0, 0x0, 0x0) 23:03:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) 23:03:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xc}}], 0x1, 0x0) 23:03:01 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:01 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) set_mempolicy(0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x6deb, 0x0, 0x0, 0x0, 0x0) 23:03:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xc}}], 0x1, 0x0) [ 387.568019][T22643] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 387.603187][T22617] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 23:03:04 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:04 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) set_mempolicy(0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x15b4, &(0x7f0000000340), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x6deb, 0x0, 0x0, 0x0, 0x0) 23:03:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2d1ee37) fallocate(r1, 0x11, 0x0, 0x1f) 23:03:04 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:04 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) getpid() symlink(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) unlink(&(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 389.841300][T22668] loop5: detected capacity change from 0 to 4096 23:03:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff70880000800328000802100001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 389.882169][T22668] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 23:03:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff70880000800328000802100001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 389.992921][T22680] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 390.001147][T22680] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.013165][T22683] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 390.021442][T22683] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) [ 390.064317][T22676] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 390.104269][T22673] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 390.148677][T22688] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 390.156908][T22688] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.197603][T22685] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:03:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff70880000800328000802100001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 23:03:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) [ 390.322403][T22701] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:05 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710a7333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad95bd0734babc7c3f2eeb57d43ddc6b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0353f080548deac270e33429fd3000175e63fb8018a8755b8a0860a43159b", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) 23:03:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710a7333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad95bd0734babc7c3f2eeb57d43ddc6b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0353f080548deac270e33429fd3000175e63fb8018a8755b8a0860a43159b", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:05 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="000000000000fc370800140000000c000600080001000000000018000200080001df000000000800010000000000040004006c00140054000600080004000000000008000100000000000800020000000000080001000000a5000800030000000000080002002600000008000200000000000800040018000000080003000020000008000200f571ff070000000000006f61646361f3762d6c696f6b0000580005005400388a8e44a20ce41d08000800efff200000000800020000000000088004000000000008000300000000000800030000000000080101a4000400becf000400010000000800020800000000080002000000ef1e1400060008000100000500000800010000000000ff7f0100080003000000000010000100756470d9027d7a3000000000380004001400010500000000000000ff000000040d78d2002000026e1a00000000000000209ff2c6d22851b4b84ea2e743c1ef660000000008aeede4b4548c98e2184300009e00141f042d297700010002000000ac14140000000000000000e61301020002000000ac14140000000009c4f4f6776297ae00080002000000008008000302000100002c0004000c00010002000000ac14140000000000000000001400020002000000ac144d3d8dac06e58c9c16004400010038080400200000000a000000030100000000000000000000000000000000004e230000001400020002000001ac1414bb00000080555104220800030001"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff70880000800328000802100001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 23:03:05 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:05 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) [ 390.659954][T22716] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 23:03:05 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:03:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 23:03:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 23:03:05 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 390.921325][T22733] validate_nla: 3 callbacks suppressed [ 390.921347][T22733] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 390.998762][T22742] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 391.051811][T22747] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 391.111749][T22753] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 23:03:05 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:05 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:03:05 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:03:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[{0x10, 0x1, 0x25}], 0x10}}], 0x2, 0x0) 23:03:06 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:03:06 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 23:03:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x80018, 0x2, &(0x7f00000002c0)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000400)="151cc4b99f4cd4e5d12eb0a8bf64e03bcdfa43d77e02fcdcc0c8bc946bd817539ee37e266ca923c234f80babeb233b39c0bed77f2d5af4ddeec9149df6f77bdbbdda1f79cd449a2d9250d1787dda9c4bb4b1c29454a71d3b3a9978e5dae6ac375a34b858c8efd0408937143a99b6bdca5a3027ef7bf4e13a265ca89c8815c18445a2c7e6ecf8d18aa5e82197faccbe66e77ddb680ca1ade8f45bb52206f91963246381b2f38d8671770c3d2db33dedee65c4cf6a01a5a398072481708c61f6c4a71dc7c592fc2ae72ab5bd2b5a365e87c8b7b65e88e4c01cbf272386a96ab6a08f843c3ef7f69d1c2c1aa6a5fc1ef0351d613d2616", 0xf5, 0x60000, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0xfc) socket(0x10, 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r3], 0x7fffffff) pipe(0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000001c0)="fc0000001a000700ab092500090007000aab0700a90110001d09369321000100ff0100000037d0090000f06c00000015fa2c1ec28656aaa79bb94b46fe000000bc00030005000000140000270400117c22ebc205214004000000008934d07302ade01720d7d5bbc91a3e3280572c05defd5a32e280fc83ab82f605f70c9d", 0x7e) write(r4, &(0x7f0000000000)="e206746cd36d998e2e48196208c660cf66f31be9c481a0fc06698258555f11e2fa5619727dd718919a43d2599be2f4f887b178eb1552959b2c0208ed199b6af39c6ca319af39b6c4664d4e6bd1daca3c0b6e60a702f070458aa028011e55ce058330c1d8289ff6ef0152112bc1fd21ff0e21ed8c86275ee3b28fbb05ce3292e82d25e6237093f7dda2fc4e8c9930646d5fa87b2412986e08f2a45f0ba54d3a407d80acef46fce9efb41858912594efc97dc339250f841fab3a83d4fe5297ac7d9dd0c5d01d8abebe70f7c00a54e22111628c242799f19435657567b3fcdc51c29eb478d2cfe7c8bfbcd6b9a761b254c0593bb0d5", 0xf4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x15) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8800) 23:03:06 executing program 4: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:03:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) [ 391.601697][T22775] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 391.805427][T22784] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 23:03:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 4: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:03:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0, 0x0) 23:03:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:06 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0, 0x0) 23:03:06 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:03:06 executing program 4: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:03:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001780)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1, 0x453, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0x4b, 0x0) 23:03:06 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0, 0x0) 23:03:06 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:03:06 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0, 0x0) 23:03:06 executing program 2: r0 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 23:03:06 executing program 4: r0 = timerfd_create(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 23:03:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:03:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:07 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40046629, &(0x7f0000000080)) 23:03:07 executing program 2: r0 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 23:03:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81c12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:03:07 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40046629, &(0x7f0000000080)) 23:03:07 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:07 executing program 2: r0 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) [ 393.013897][T22899] ================================================================== [ 393.021985][T22899] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getpage_gfp [ 393.030207][T22899] [ 393.032509][T22899] write to 0xffff88812d053780 of 8 bytes by task 22895 on cpu 0: [ 393.040197][T22899] shmem_add_to_page_cache+0x52d/0x650 [ 393.045632][T22899] shmem_getpage_gfp+0xbdc/0x1410 [ 393.050633][T22899] shmem_fault+0x16d/0x500 [ 393.055025][T22899] handle_mm_fault+0xe8d/0x1a70 [ 393.059900][T22899] do_user_addr_fault+0x60c/0xc00 [ 393.064904][T22899] exc_page_fault+0x94/0x230 [ 393.069491][T22899] asm_exc_page_fault+0x1e/0x30 [ 393.074339][T22899] copy_user_generic_unrolled+0x86/0xc0 [ 393.079863][T22899] _copy_from_user+0x7e/0xd0 [ 393.084428][T22899] __copy_msghdr_from_user+0x44/0x350 [ 393.089778][T22899] __sys_sendmmsg+0x1f0/0x4b0 [ 393.094449][T22899] __x64_sys_sendmmsg+0x53/0x60 [ 393.099277][T22899] do_syscall_64+0x34/0x50 [ 393.103670][T22899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.109541][T22899] [ 393.111846][T22899] read to 0xffff88812d053780 of 8 bytes by task 22899 on cpu 1: [ 393.119447][T22899] shmem_getpage_gfp+0x1017/0x1410 [ 393.124551][T22899] shmem_fault+0x16d/0x500 [ 393.128943][T22899] handle_mm_fault+0xe8d/0x1a70 [ 393.133797][T22899] do_user_addr_fault+0x60c/0xc00 [ 393.138800][T22899] exc_page_fault+0x94/0x230 [ 393.143366][T22899] asm_exc_page_fault+0x1e/0x30 [ 393.148195][T22899] copy_user_generic_unrolled+0x86/0xc0 [ 393.153716][T22899] _copy_from_user+0x7e/0xd0 [ 393.158282][T22899] do_recvmmsg+0x240/0x9e0 [ 393.162675][T22899] __x64_sys_recvmmsg+0xcf/0x150 [ 393.167586][T22899] do_syscall_64+0x34/0x50 [ 393.171979][T22899] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 393.177866][T22899] [ 393.180163][T22899] Reported by Kernel Concurrency Sanitizer on: [ 393.186282][T22899] CPU: 1 PID: 22899 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 393.194669][T22899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.204697][T22899] ================================================================== 23:03:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:08 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40046629, &(0x7f0000000080)) 23:03:08 executing program 2: r0 = syz_io_uring_setup(0xd1b, &(0x7f0000000840), &(0x7f0000ee4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000800)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001500)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x4510, 0x0, 0x0, 0x0, 0x0) 23:03:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:08 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40046629, &(0x7f0000000080)) 23:03:08 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfffc, 0x0) read(r2, &(0x7f0000000040)=""/64, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x10034) 23:03:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='O'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0x13c) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:03:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:08 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:08 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='O'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0x13c) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:03:09 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:09 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfffc, 0x0) read(r2, &(0x7f0000000040)=""/64, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x10034) 23:03:09 executing program 1: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='O'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0x13c) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:03:09 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 23:03:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB='O'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, r1}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0x13c) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 23:03:09 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendto$inet(r0, &(0x7f0000000080), 0xa4f0, 0x0, &(0x7f00000001c0), 0x10) recvmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) 23:03:09 executing program 1: unshare(0x8000400) r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 23:03:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) 23:03:09 executing program 1: unshare(0x8000400) r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 23:03:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfffc, 0x0) read(r2, &(0x7f0000000040)=""/64, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x10034) 23:03:09 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x802) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x0, @time, 0x0, {}, 0x0, 0x0, 0x85}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfd76) 23:03:09 executing program 3: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb1c3000) 23:03:10 executing program 1: unshare(0x8000400) r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 23:03:10 executing program 4: r0 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 23:03:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb1c3000) 23:03:10 executing program 3: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 1: unshare(0x8000400) r0 = socket(0x11, 0x800000003, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 23:03:10 executing program 1: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb1c3000) 23:03:10 executing program 4: r0 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 23:03:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfffc, 0x0) read(r2, &(0x7f0000000040)=""/64, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x10034) 23:03:10 executing program 3: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 5: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xb1c3000) 23:03:10 executing program 1: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 4: r0 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 23:03:10 executing program 3: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 5: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 1: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 0: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 4: r0 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', 0x0, 0x2}) 23:03:10 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1) 23:03:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73661fe41100080101000240002000f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100098e670325132510000e67032510300000000002e2e202020202020202020100098e670325132510000e670325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200098e670325132510000e670325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) 23:03:10 executing program 5: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0x4c, 0x2d, 0x4f79, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x2]}}}, 0x4c}}, 0x0) 23:03:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x560a, &(0x7f00000013c0)) 23:03:10 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1) 23:03:10 executing program 0: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0x4c, 0x2d, 0x4f79, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x2]}}}, 0x4c}}, 0x0) 23:03:10 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1) [ 395.870097][T23054] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.892495][T23056] loop3: detected capacity change from 0 to 128 23:03:10 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a75", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:03:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7463, &(0x7f0000000180), &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3ff}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000100)=@xdp}, 0x722c) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 23:03:10 executing program 0: pipe2(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000480)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x2a, 0x0, 0x0, 0xfffffffe, 0x0, "8712e8637e1d4880f05a39f1166fc707f6b487"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000480)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000100)=[{r1, 0x4}, {r4, 0x3c0}, {0xffffffffffffffff, 0x71b2}, {0xffffffffffffffff, 0x4098}, {r1}, {r0}, {r7, 0x1404}, {0xffffffffffffffff, 0x1000}], 0x8, 0x7fff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0) 23:03:10 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/145, 0x91}], 0x1) 23:03:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0x4c, 0x2d, 0x4f79, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x2]}}}, 0x4c}}, 0x0) [ 395.949163][T23073] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 23:03:10 executing program 0: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) [ 396.041376][T23093] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.071212][ T25] kauditd_printk_skb: 5 callbacks suppressed 23:03:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7463, &(0x7f0000000180), &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3ff}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000100)=@xdp}, 0x722c) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 23:03:10 executing program 1: pselect6(0xfffffffffffffeea, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 23:03:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)={0x4c, 0x2d, 0x4f79, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x0, 0x2]}}}, 0x4c}}, 0x0) 23:03:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) [ 396.071222][ T25] audit: type=1400 audit(1619478190.603:122): avc: denied { module_load } for pid=23095 comm="syz-executor.3" path="/root/syz-executor.3" dev="sda1" ino=13852 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 trawcon="system_u:object_r:iptables_unit_file_t:s0" [ 396.118250][T23097] Module has invalid ELF structures 23:03:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7463, &(0x7f0000000180), &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3ff}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000100)=@xdp}, 0x722c) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) [ 396.176129][T23112] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.202280][T23116] Module has invalid ELF structures 23:03:13 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a75", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:03:13 executing program 1: pselect6(0xfffffffffffffeea, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 23:03:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x7463, &(0x7f0000000180), &(0x7f00003b2000/0x800000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3ff}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000100)=@xdp}, 0x722c) io_uring_enter(r1, 0x4ab0, 0x0, 0x0, 0x0, 0x0) 23:03:13 executing program 0: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:13 executing program 1: pselect6(0xfffffffffffffeea, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 23:03:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd600}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 399.004269][T23130] Module has invalid ELF structures [ 399.018233][T23131] Module has invalid ELF structures 23:03:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:13 executing program 1: pselect6(0xfffffffffffffeea, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 23:03:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x800, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x20) [ 399.105444][T23149] Module has invalid ELF structures [ 399.113696][T23152] Module has invalid ELF structures 23:03:16 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e71b0fb1f147a8378f364602812c66538d750f6ee1d001f43f0500bb9fb045f2d1eaa302ab6c2fef2308003ea1315b9532f3af2f5e153eb78020fa00eb298802d8f6c1f3b18d6d352507f7018b31a53bad1ec3533c791a75", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:03:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x12, 0x0, 0x0) 23:03:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') dup3(r1, r2, 0x0) finit_module(r2, 0x0, 0x0) 23:03:16 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="6ec097be2e683afa912f43a776b3651760b6eed2a736fca118f10000000000001000000000000000", 0x28}], 0x1}, 0x0) 23:03:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x800, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x20) 23:03:16 executing program 0: sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x20}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) 23:03:16 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="6ec097be2e683afa912f43a776b3651760b6eed2a736fca118f10000000000001000000000000000", 0x28}], 0x1}, 0x0) 23:03:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x800, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x20) 23:03:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x12, 0x0, 0x0) 23:03:16 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000580)="6ec097be2e683afa912f43a776b3651760b6eed2a736fca118f10000000000001000000000000000", 0x28}], 0x1}, 0x0) [ 402.049925][T23169] Module has invalid ELF structures 23:03:16 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2d1ee37) writev(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)='I', 0x1}], 0x1) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) 23:03:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x12, 0x0, 0x0)